a81db1b16e5c4b1899256b746d3311c7548c77e3a770cd66b9f1cdb4c19d868d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a81db1b16e5c4b1899256b746d3311c7548c77e3a770cd66b9f1cdb4c19d868d
Size

394KB
MD5

d20f37fd4bdc5f42eb0b4529e8adabb7
SHA1

90c7aae94f7f0c472c28752e29bcf2c4ac0ddbe9
SHA256

a81db1b16e5c4b1899256b746d3311c7548c77e3a770cd66b9f1cdb4c19d868d
SHA512

f9627951bef5624781ff204c188224ce3fba57e7726d3c18ed035c84eaae7d05f85e60bc527477d9098219957cc3dd05756a48a36ff670676b6f0868fa0a48d5
SSDEEP

12288:lnPS158DosNLXmCXTErIQyxoqnzpoCvCi:p+qDoRCXTErI1cC

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

a81db1b16e5c4b1899256b746d3311c7548c77e3a770cd66b9f1cdb4c19d868d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 333KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flow
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE