a4ed97f29501374a56a248a5fcb2d0f600536d58748e6c561dc022139d321994 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4ed97f29501374a56a248a5fcb2d0f600536d58748e6c561dc022139d321994
Size

513KB
MD5

d4b0b619c5db73fd70bffbffa4bf9334
SHA1

9d13f634913b4db2795abe1774f4721c2d8859e7
SHA256

a4ed97f29501374a56a248a5fcb2d0f600536d58748e6c561dc022139d321994
SHA512

6792651e1312301bf9486e2a926540c1c06f99e41cc25a2993c3ebdaf357823ab972b24bd3f40644ce6eeeac44aaaf65cd98268b15efb3633f8d2c524410440a
SSDEEP

12288:Qhnz0DPb747np84qgLOYh7RMRTAcpTPL6B7Sgrm:Qcb7Mp8N2UDlqtq

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

a4ed97f29501374a56a248a5fcb2d0f600536d58748e6c561dc022139d321994
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

hhjffpoiiuj

Sections

.text
Size: 217KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE