dc7dffb7ee6c63ec4675ef86a24288414f48f1048dce20f93d1e5bffece7e1bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc7dffb7ee6c63ec4675ef86a24288414f48f1048dce20f93d1e5bffece7e1bb
Size

1.1MB
MD5

72fea7314a0dc9aa67bcdf63fb3439a0
SHA1

b5d4d1c2d5b8acc4605fb05769eda708ed1a7df6
SHA256

dc7dffb7ee6c63ec4675ef86a24288414f48f1048dce20f93d1e5bffece7e1bb
SHA512

a48017a7fab84d56a5dcc557af6365507884e6ca6284c47c6c18e34da81b3ba88098093cb6777074b371db6a0c621c829fb24f90e3422aba3411e8cb29b1106d
SSDEEP

24576:NVvOBLoOpxGbATqF8a+a6OxtmLd0jCwbZTwjURqHAEVdoeBAPv51Z6FurhtJZhQ2:NwoOpxGbWa+aFzmx1wbZNqg3eMB6otJl

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

dc7dffb7ee6c63ec4675ef86a24288414f48f1048dce20f93d1e5bffece7e1bb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 418KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 752KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 104KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE