e6ebad8b51c8da230b09969410a186e25305efbbd29b098f507aa9fad04d5b49 | Triage

Sharing

General

Target

e6ebad8b51c8da230b09969410a186e25305efbbd29b098f507aa9fad04d5b49
Size

198KB
MD5

b30a4698c48c5382ad5fcfea0c27a914
SHA1

6361857dc0a23dae883d000ee7730b6cb9d73c25
SHA256

e6ebad8b51c8da230b09969410a186e25305efbbd29b098f507aa9fad04d5b49
SHA512

ec9a4f0bed1406979d9ac087d7db63410967c248fa6241931fe1784af3988b6612f7eca7e81aa13bc40d5b6e83d4d9a2f80c74b23eb938cfe90dbd1f9aaa8552
SSDEEP

3072:8jZ4HNxvJ41F7O/nYqtvorq3r7cc5YiM0wAHd2ALE6W9Uom4:UG3vJ41Fq/nZr7LYinzcV9Uom4

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

e6ebad8b51c8da230b09969410a186e25305efbbd29b098f507aa9fad04d5b49
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 93KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE