a7f49f37b38f9809fa151432f6811e66512203975a23f151e83e75e26ce7621b | Triage

Sharing

General

Target

a7f49f37b38f9809fa151432f6811e66512203975a23f151e83e75e26ce7621b
Size

341KB
MD5

a9e9f3c7953958f005629e5481bfb54c
SHA1

54f147f9146df0b069b990cfb0f7da6c28a8218b
SHA256

a7f49f37b38f9809fa151432f6811e66512203975a23f151e83e75e26ce7621b
SHA512

715ce7a24a25051098206589050c389cc9a6f1ad00fb9d5a0d190f2e32f1663d251733ea6cd9017631389bc40adf9932ed3b9598ee37366df8c88415bfcb1ec9
SSDEEP

3072:51UhmpSz3q5yzPAhPJiN6Mmg1gTSIW1bl/Po4UyXOsUO2WOvO:XLpm3nLA/ieg1gTW1thUyu

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

a7f49f37b38f9809fa151432f6811e66512203975a23f151e83e75e26ce7621b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 90KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE