ee9189e0870a8b5917be17973d85f3d2f173e4310cdca18cfa24f466048573e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee9189e0870a8b5917be17973d85f3d2f173e4310cdca18cfa24f466048573e3
Size

217KB
MD5

7b1f1936b0b1fa99a1125c690fa19fcf
SHA1

770d7f2016ff8a7678e57381fc98c3fadf687ab6
SHA256

ee9189e0870a8b5917be17973d85f3d2f173e4310cdca18cfa24f466048573e3
SHA512

f2d4259726f0ba105b4625559d89f83e51694f1038481c4dd147a6967ff67d096ffd4956580842bcc1df13a8a95cfef528c9b622c939ca5ed82dbe79783e9e63
SSDEEP

6144:3riNahGJCYokkjbnOrRlYebwMkI6g8MUDeOUIokgogE44Ws5IDjkq/:bishdjbnOl7kI6g8MUDeOUIokgogE44e

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ee9189e0870a8b5917be17973d85f3d2f173e4310cdca18cfa24f466048573e3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sec
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE