d00b092383c08e4888621640457ee3c7b0dd0ee9e5310ee02a229b1998bdc92f

Sharing

Copy URL

Twitter E-mail

General

Target

d00b092383c08e4888621640457ee3c7b0dd0ee9e5310ee02a229b1998bdc92f
Size

1.3MB
MD5

5f05a3788cc0fb6bed289b21b8241faa
SHA1

525961a42851f64755c76d7944e1a45f06051d6d
SHA256

d00b092383c08e4888621640457ee3c7b0dd0ee9e5310ee02a229b1998bdc92f
SHA512

f8d43e96a0e17c65aac0633166fd478e5f73d0bbf3292ec55dd9ff4ef9512bf2a3097d783fbccaf7f561a146e17c9136a90752d22676dd6f9d9d23108df8bf8c
SSDEEP

24576:3dMV7cMgSQpXdKvQ0nWDGB+xqu6TjX+o4ZjaDhj6TyqFYomc97PxXDfoj11TUnbR:3dWASQXKvQ0nWiQxqu6Tjuo4ZGDh2FYe

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

d00b092383c08e4888621640457ee3c7b0dd0ee9e5310ee02a229b1998bdc92f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 117KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 722KB - Virtual size: 976KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 423KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 117KB - Virtual size: 296KB

.data Size: 722KB - Virtual size: 976KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 1KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 423KB - Virtual size: 540KB

.reloc Size: - Virtual size: 20KB

.aspack Size: 74KB - Virtual size: 76KB

.adata Size: - Virtual size: 4KB

.text
Size: 117KB - Virtual size: 296KB

.data
Size: 722KB - Virtual size: 976KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 423KB - Virtual size: 540KB

.reloc
Size: - Virtual size: 20KB

.aspack
Size: 74KB - Virtual size: 76KB

.adata
Size: - Virtual size: 4KB