f55f853a2abf1e7076afd436ca9ee717746ca1cb1d0af1867eb2a31ff405b48b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f55f853a2abf1e7076afd436ca9ee717746ca1cb1d0af1867eb2a31ff405b48b
Size

400KB
MD5

7c2a07c8c70d0729974c12ad067411c8
SHA1

8eff9c106fca500dd9337025ebad38e62b36c7c1
SHA256

f55f853a2abf1e7076afd436ca9ee717746ca1cb1d0af1867eb2a31ff405b48b
SHA512

7b85db485126d8962f2b5f697acd3ac8f0e516df34385221b4db8a8a46103bd32080baa6f7f6625f4a6d847b71c35a49f6cc4af4bc2ce53d5e14b510892ec594
SSDEEP

12288:5EViUUjQ1yMfn9C+3aHgsGPTepL6rAWLo75dKosPE0lsYq:5IiUVnf9hQGPTepL6rAWLo75dKosPps/

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

f55f853a2abf1e7076afd436ca9ee717746ca1cb1d0af1867eb2a31ff405b48b
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Get_Hardware_Information

Sections

.text
Size: 258KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE