d0e5ef21463fb71b58caa042e1ce48010b0b2297526fd7e75581f761b274e152 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0e5ef21463fb71b58caa042e1ce48010b0b2297526fd7e75581f761b274e152
Size

178KB
MD5

3baeeb025ad228eaf7a46d6ddd33df0d
SHA1

c5b4ba4b711451054b22a9895c59f2ae3ef706bd
SHA256

d0e5ef21463fb71b58caa042e1ce48010b0b2297526fd7e75581f761b274e152
SHA512

5e1b7f13ce7963a2846f45c542a0df40809debcfcc67bf3a7c773a314f9589076b486730e494fa1a3a207d1c569c6891cd561797d61b30990c77504b5a44b58b
SSDEEP

3072:jL+TQIEJzM3dK9QUZhraguvSB7bNE++u864lv+JLbequPbPavIA7xd:jq0/NQs/uvS1bN51osbhYbivIA7

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d0e5ef21463fb71b58caa042e1ce48010b0b2297526fd7e75581f761b274e152
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 133KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE