3530a78d6e42c1585408f5b938e27484586c64ed382039507401d90c9d8b41bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3530a78d6e42c1585408f5b938e27484586c64ed382039507401d90c9d8b41bc
Size

399KB
MD5

51be745591e166e423218d6d005524bd
SHA1

8a1c92f2a1407a38f6c53d31aa0d62e94b409f58
SHA256

3530a78d6e42c1585408f5b938e27484586c64ed382039507401d90c9d8b41bc
SHA512

5e5e23d1911c45eada0915bd619e2293a46009a655ced809c0f460a2330c9e1b4fa9ecd99575ad09d20f02a2fc072e5577c39fa1279fcbc0a1d8c384e1e553da
SSDEEP

6144:XbQjjCEQV7Z++mBejGuKkWAjYK92M+T6LK7qb9An1:XbCjCh+++eKud5cK9e97qpq

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

3530a78d6e42c1585408f5b938e27484586c64ed382039507401d90c9d8b41bc
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Cancel_attention
Cancel_attention_Code
Friendships_Code
Search_Uid
Weibo_Friendships
friendships_Regular
friendships_friends

Sections

.text
Size: 254KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 21KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE