0f823e8cbd4bfa829786242ceb29d02e619658168db506135673e461ce86dc00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f823e8cbd4bfa829786242ceb29d02e619658168db506135673e461ce86dc00
Size

307KB
MD5

5dceab86ef4ae510eb33cced577ed7ee
SHA1

af6edd7fc664fcd2dc5da90d52631be678308020
SHA256

0f823e8cbd4bfa829786242ceb29d02e619658168db506135673e461ce86dc00
SHA512

a2f57c382bfba2e76fef55b395c396ff1e64b2fbbeca6f56bba95a8be74a5397544fea3cbf2f89ec12ac5e9a705edd44ef14492a67acdc8cac9255fef4048397
SSDEEP

6144:WaCMe/C3PDmrMl+yWQk70Bgd/650DEx+5Ll7IhxxcFkJI5VLVD/F:+kLmIAJ0ydC5JuLlkh3cFkJk7F

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

0f823e8cbd4bfa829786242ceb29d02e619658168db506135673e461ce86dc00
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE