8e4fbc8b49aba9f7f68303d7ad91bd2e7f9bf96ec2558a7104e039b00c3b416d | Triage

Sharing

General

Target

8e4fbc8b49aba9f7f68303d7ad91bd2e7f9bf96ec2558a7104e039b00c3b416d
Size

345KB
MD5

331a51a033afbb318782e80d94626e36
SHA1

962d6c3d30899e87c897bea48589a27099627211
SHA256

8e4fbc8b49aba9f7f68303d7ad91bd2e7f9bf96ec2558a7104e039b00c3b416d
SHA512

d75da2ab98ae61ffd698480f3db611fb2cc5044944ab212cb0a5837286fa5ec377079d706ab3cd1a41d8630d622d795fd1e459ef02aa5165b3b6c01abd8c62e2
SSDEEP

1536:4rrh+rW192NlW6ojvCEMRkQNNx+y4bGbehFs2POHNbArcInk1FXkvJqnnrnnnQI/:cHvF+GGbq+HNbArZGgTcaKh8XShLyWv

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

8e4fbc8b49aba9f7f68303d7ad91bd2e7f9bf96ec2558a7104e039b00c3b416d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

eurgtewg
Size: 48KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shgrhwrh
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fjuergvf
Size: 2KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 293KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE