f9431d24ec8e0a2faa8f35be1fa35724fb3001d2e51b9b134a7ed527c6f4ff0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9431d24ec8e0a2faa8f35be1fa35724fb3001d2e51b9b134a7ed527c6f4ff0e
Size

798KB
MD5

35b121723a5adf53e75b4e7946978706
SHA1

b8b157b46d60faa854d18e8882fcb8312d5e7f70
SHA256

f9431d24ec8e0a2faa8f35be1fa35724fb3001d2e51b9b134a7ed527c6f4ff0e
SHA512

9f249d6bacfeacb7756a761207dcd6a21e663b66a8ffc4a704a701df22e26a80166b7e48de046ac002de6dc99dd0c6fbfa21b62cab8d6695ed2ad00149aee63b
SSDEEP

24576:qDYH5p7MeURqGFHS2GZC8/+10nykU3tuB+hdxBdJZs:qW5HURqWhGZC49yfcWxBdXs

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

f9431d24ec8e0a2faa8f35be1fa35724fb3001d2e51b9b134a7ed527c6f4ff0e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE