70dee52ca5b6d476d0f6b242215c0f3b7b50cbd7bfb2ea19f1c4f9660857b5a2 | Triage

Sharing

General

Target

70dee52ca5b6d476d0f6b242215c0f3b7b50cbd7bfb2ea19f1c4f9660857b5a2
Size

3.8MB
MD5

4b54ca1fa48c12eedb18cfdeeec46af7
SHA1

c1923c9b06616475e4570ed2808173427cf2430e
SHA256

70dee52ca5b6d476d0f6b242215c0f3b7b50cbd7bfb2ea19f1c4f9660857b5a2
SHA512

ad188b01ef36ffcdb2a5a0a57fd6c2b51969bef80f72d27fa9f6fdd7292912f9251b8da1d1d37652408bf4ce9b1d54e58401bc800513c72e25b41056679495a6
SSDEEP

98304:XkrnANAVG4mrTWsdmdC0aBgtIltMNLiTi0QrbEyGKF:OaAAWdCVGf2Ti0JTK

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

70dee52ca5b6d476d0f6b242215c0f3b7b50cbd7bfb2ea19f1c4f9660857b5a2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 21.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 337KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE