8aea4776dd8d4f29c9e6d3f735e7961c6e2f1a3b61df2f77ac1fdd9b8504b83e | Triage

Sharing

General

Target

8aea4776dd8d4f29c9e6d3f735e7961c6e2f1a3b61df2f77ac1fdd9b8504b83e
Size

1.5MB
MD5

66fd49545f176531f046428800ca8d2f
SHA1

319eb900de521b031518887ccc326df549d67763
SHA256

8aea4776dd8d4f29c9e6d3f735e7961c6e2f1a3b61df2f77ac1fdd9b8504b83e
SHA512

f6850872f19b6baedd640c24a287a4a01063161ba9d135a541bb351c7ee5864112ab200a9bcbb053de15307174deb126de78db75f6b4e3c94fe527b9f55df326
SSDEEP

49152:ujW0n5E+wT1vk1CUF4+y1ePeSBfpAIuMeBsSU4:K41vk1CBcjBCIlb

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

8aea4776dd8d4f29c9e6d3f735e7961c6e2f1a3b61df2f77ac1fdd9b8504b83e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 145KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 95KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE