e0d59b65b214e328a4add7503e0db46a7b6c77cb43a240c9d386c6485aa5cfc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0d59b65b214e328a4add7503e0db46a7b6c77cb43a240c9d386c6485aa5cfc7
Size

35KB
MD5

8b2c0235233333022c7d206637d61ae1
SHA1

e3c533ef1115cc19b65cbee2f5a40514d45f5585
SHA256

e0d59b65b214e328a4add7503e0db46a7b6c77cb43a240c9d386c6485aa5cfc7
SHA512

3e2870fa1d034178431c475dcb9fbc7c8b5449578f83cd2af1fcd14f5d0bc513f7e7481a5c39b9ee14194a9b34b39140a3104e3eaf8875a6851c095648a2bfdf
SSDEEP

768:vZdiVfhemh3luBORzWIWSwnFtUwkf3Xz9e81DDMFBx2ha5n:vaVf93luBOxXWS+tUwkf35zKsK

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

e0d59b65b214e328a4add7503e0db46a7b6c77cb43a240c9d386c6485aa5cfc7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE