d3df528f8251c1f4994bccfb9d5ba36b19a9c5191c0972b4d3b882c7d7d7cee6[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

d3df528f8251c1f4994bccfb9d5ba36b19a9c5191c0972b4d3b882c7d7d7cee6.bin
Size

2.9MB
MD5

e4db0e319e0a7d52a98ebaceab9f3912
SHA1

2b2b469fd8218423f379dee2735780fd2bf26778
SHA256

d3df528f8251c1f4994bccfb9d5ba36b19a9c5191c0972b4d3b882c7d7d7cee6
SHA512

50da2374ef5eca778179296e955341716de2f0ede11a6e046ac12abaf08fd503537236d73eb34d29f3bef7204bdf4c0c7f26c3ba45f65a97bf0b6fc12a5f193b
SSDEEP

49152:DkfUPkGHemyClquLqOqpwUrY0vTfCCu8JU7YyF8Vk1bu0aY0J8BoCFx8WoclNlS/:ofUsG+qUdCCRJqF8Vk/abJ0jr8WjlN86

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

d3df528f8251c1f4994bccfb9d5ba36b19a9c5191c0972b4d3b882c7d7d7cee6.bin
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 433KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 433KB - Virtual size: 1.2MB

.data Size: 15KB - Virtual size: 96KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 12KB

.didata Size: 512B - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 2.4MB - Virtual size: 8.4MB

.reloc Size: - Virtual size: 96KB

.aspack Size: 30KB - Virtual size: 32KB

.adata Size: - Virtual size: 4KB

.text
Size: 433KB - Virtual size: 1.2MB

.data
Size: 15KB - Virtual size: 96KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 12KB

.didata
Size: 512B - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 2.4MB - Virtual size: 8.4MB

.reloc
Size: - Virtual size: 96KB

.aspack
Size: 30KB - Virtual size: 32KB

.adata
Size: - Virtual size: 4KB