918e8f1ceab3c3dfafb8693ff97b4c0f5f51b2a42c5807fa856e62b58d589e29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

918e8f1ceab3c3dfafb8693ff97b4c0f5f51b2a42c5807fa856e62b58d589e29
Size

114KB
MD5

924af1cb80a2827f2d97b44793986a79
SHA1

7fb3ef3f21e7805d402c66dc5c682e779cf03069
SHA256

918e8f1ceab3c3dfafb8693ff97b4c0f5f51b2a42c5807fa856e62b58d589e29
SHA512

bb2e152f16d94cb391e074e1907db2e73261ca812238a800dd774507ff21e24ae61d97448a52fb944edf97db2fe503654b7af8d184a3ac25b3c2b4e3e41c199a
SSDEEP

3072:3yVo9VzSCUWQip8Vzv9q1uHx8Tu7uQrg:r9VGcrpQ6uCY7r

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

918e8f1ceab3c3dfafb8693ff97b4c0f5f51b2a42c5807fa856e62b58d589e29
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.dmqwu6
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shxyjl
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rbss
Size: - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE