7888b67da8fd8ee6f7e633e22cf796ebfbbd75862a62bad289141d85d36bd6d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7888b67da8fd8ee6f7e633e22cf796ebfbbd75862a62bad289141d85d36bd6d8
Size

300KB
MD5

5f59f85d6c5ecd3ae434dc1270aa992f
SHA1

4f79539cb86b2101d65837091e4ef93be2a44472
SHA256

7888b67da8fd8ee6f7e633e22cf796ebfbbd75862a62bad289141d85d36bd6d8
SHA512

184ea97922aa8236d15cef8adde2de2e00093945d1c8b4fcdaf27da51e5fede6be191e157a38605cda3b36eec724d10aadc82119cf162550c9c42e19a6bd88fd
SSDEEP

6144:16FBGpBsVh5KFPXUNPk/TkQXaWQPfpU8UimL:uBezNQPsNqf+8+

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

7888b67da8fd8ee6f7e633e22cf796ebfbbd75862a62bad289141d85d36bd6d8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 238KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE