f3bf3dcb14ae9d5ab2b49bb3e43c6defa9fc10597463d19340f5fe5e59b18ee3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3bf3dcb14ae9d5ab2b49bb3e43c6defa9fc10597463d19340f5fe5e59b18ee3
Size

282KB
MD5

4713eb43fc1d4197087bac922459dc61
SHA1

dc39cd3b9641b74d11a74feb03c5afed666dba8e
SHA256

f3bf3dcb14ae9d5ab2b49bb3e43c6defa9fc10597463d19340f5fe5e59b18ee3
SHA512

e98c23cc824d79f7c5ee452cc25fd65df8301db1c4e02d14727b05646432fa3927ffcf160b204d238ce6d528dd0faf40c6dd6d5840fceec145e7f8ec0431434b
SSDEEP

6144:s2/YHetOoyq+wkhRMTlfrqtaOIMbml3y6c/yt+T1nnU5k93o:s2TtIHR4frpIGeM+T1nU5kh

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

f3bf3dcb14ae9d5ab2b49bb3e43c6defa9fc10597463d19340f5fe5e59b18ee3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GAISF
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE