c10891c129a201307b8a91abc7e5c5cb5ea92dfb5c57ed40d13282c281b6c98c | Triage

Sharing

General

Target

c10891c129a201307b8a91abc7e5c5cb5ea92dfb5c57ed40d13282c281b6c98c
Size

247KB
MD5

ce55728c655f6ba793259a46c6099c93
SHA1

eddf11cd121d7e8ff07c02d57254d5e72ab77794
SHA256

c10891c129a201307b8a91abc7e5c5cb5ea92dfb5c57ed40d13282c281b6c98c
SHA512

71e1b30bc11d8834c228e2103038f7d7a64a226fb07cfacf7b383f335431172c635a9a3410c90312fd4cbde797fa96ed949b17b912e89d79c8c49aced1e7d18d
SSDEEP

3072:bnXmoQ4aDxYugKho99EsmLeIUg8pVjiRk2gQHhLRmp+cIy:xudho99EsmLeIUJeRk2H3mp+

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

c10891c129a201307b8a91abc7e5c5cb5ea92dfb5c57ed40d13282c281b6c98c
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE