6332d2d51bb2682542120d704d85bcc0ff5211172f2c89c83ad17669e7348a09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6332d2d51bb2682542120d704d85bcc0ff5211172f2c89c83ad17669e7348a09
Size

444KB
MD5

111f6f5f7b48bda7f5c2045d4d58262a
SHA1

87b0c0552fec3a3dc68b74ac18a292cb26aef814
SHA256

6332d2d51bb2682542120d704d85bcc0ff5211172f2c89c83ad17669e7348a09
SHA512

1a57d07a857a0b11cf35e9f3256dd146b469c7dfe4a1cc39baca9f8841a86ee43f9e1389203796f7de44194bd3327075c1b9abdfd6bf0fcbc690b7c0b35a0096
SSDEEP

12288:7bpdbh09d3xleME1LrHmwAGDDieq0Phek6sWh:XpdbKdBwRSGCQhemWh

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

6332d2d51bb2682542120d704d85bcc0ff5211172f2c89c83ad17669e7348a09
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Connecting_Server
Login
Registration
Set
Verify

Sections

.text
Size: 285KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE