b862f809c21fcc7245bb1715ef44fff2f412cb2c521dc249f4863526b62ea9c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b862f809c21fcc7245bb1715ef44fff2f412cb2c521dc249f4863526b62ea9c6
Size

463KB
MD5

5af4d9dcc2db55b954c711d2683bfa25
SHA1

df4359614606f0d3f8d000a5900abf2d13bac59c
SHA256

b862f809c21fcc7245bb1715ef44fff2f412cb2c521dc249f4863526b62ea9c6
SHA512

c82b76a967683c2eb0d07a971319f4a2e2a37437b483ada6d8133f286b3f1518c7157252087ec5f04b01457cf35e03d508310e84dedf45ff7b0a0cd8174f5a1c
SSDEEP

12288:bUGuzQAdsY3BGZneLTulCvJjKLIRhbKfFLkIT2rtGfiVYIx3l:bUG4Q6s5eLClmJ9/0LkO2rcfcx1

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

b862f809c21fcc7245bb1715ef44fff2f412cb2c521dc249f4863526b62ea9c6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE