dd3a24fae05242cbbd677aa3bce3febabdf5dc40cfe3bec9f50d4aab002e8286 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd3a24fae05242cbbd677aa3bce3febabdf5dc40cfe3bec9f50d4aab002e8286
Size

32KB
MD5

2434a278a472311a6ec4f86151eacdfe
SHA1

a20c297058c5317f9280a6a7945e10409dab2174
SHA256

dd3a24fae05242cbbd677aa3bce3febabdf5dc40cfe3bec9f50d4aab002e8286
SHA512

eabf668c7c1820b3cc8d170e90097354a8cddcdd0e8658e17007d07fef2075a08afb708ea7237fe5e7fbea6913749a098f2a227972a0f243a98602874a0eef3f
SSDEEP

768:wehGCqdeGLQ05FL7YMPp/1aDQ08qgyDBZ8JH8BKWEGtxRbPr:w598L05F4I/QDX8aVGx8BKWEE

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

dd3a24fae05242cbbd677aa3bce3febabdf5dc40cfe3bec9f50d4aab002e8286
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PEPACK!!
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newimp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE