ba178993d441145fd4df6d6d26f1e0c03febf7f65034292500ccc0ea14ed6ab3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba178993d441145fd4df6d6d26f1e0c03febf7f65034292500ccc0ea14ed6ab3
Size

56KB
MD5

8bc2b11551e06c7ac071565326d0a94e
SHA1

46e65c48cbaafd9e81a2b7825d3fabf04be37452
SHA256

ba178993d441145fd4df6d6d26f1e0c03febf7f65034292500ccc0ea14ed6ab3
SHA512

cdea9782926f38a9d25e66796e9b91aac080e0152795a6ad09b8b553bb7c6f3e831fe622412a4c38566e306a0fd1201532f2f485e8e766fcc6518657fa251789
SSDEEP

1536:RbOxvLOAcLEBXll2733cyf6VMkXd/vL3Imzy+pR:s5xcLglEHEXL3ImzyMR

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ba178993d441145fd4df6d6d26f1e0c03febf7f65034292500ccc0ea14ed6ab3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE