4d3093eee34626c2edafed80db9e5c212efc4333415abb3bc040583a0e3c6eb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d3093eee34626c2edafed80db9e5c212efc4333415abb3bc040583a0e3c6eb6
Size

375KB
MD5

a042e3f2389f96011cdafe5f7b92c880
SHA1

f8d85d69a9eccffb206c7225971e78dc86cbc032
SHA256

4d3093eee34626c2edafed80db9e5c212efc4333415abb3bc040583a0e3c6eb6
SHA512

4d8139b5a5afaae59cc36e956e0b2139ec244f1b01da2f12724c66774e896de9383f2b58190b5faf6afb7dba06d03bd68581d500a758b94a05926fc901517f9b
SSDEEP

6144:fOTs+anjhW5910D77us6fpEdbEc8nCke6rMyuvVf0ReyYSZK4y2pt:fOT/8FWfHidbE9eiQg

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

4d3093eee34626c2edafed80db9e5c212efc4333415abb3bc040583a0e3c6eb6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 285KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE