7b352960d9ac101523b6e991d18f4c70dee52405ca96fa1a58090ab7bca8e204 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b352960d9ac101523b6e991d18f4c70dee52405ca96fa1a58090ab7bca8e204
Size

297KB
MD5

96ad51ed9a5a488c4b5e2c729673559b
SHA1

028be58b55f3b28601cb048fb2c71285c01fff99
SHA256

7b352960d9ac101523b6e991d18f4c70dee52405ca96fa1a58090ab7bca8e204
SHA512

9cb804402ab8098d08bb915c345894240cd648b63b541e41d8cf8671a96e1f91d556d0eba19e688ca781bf8a86d8aafe1ab26dcdc0c9655d121fe4768f874b98
SSDEEP

6144:/v+il+yugsAwfdUEN4OmUz6M7rHwn0W77UrezN1Bhsx7gI1Lsnx:J1ufdUE8inFrezN1BmR5Bsnx

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

7b352960d9ac101523b6e991d18f4c70dee52405ca96fa1a58090ab7bca8e204
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE