5cd969d4c0117407303f58e6c11be221a5e8c561b8158e4a3e561e2aa7deeac9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cd969d4c0117407303f58e6c11be221a5e8c561b8158e4a3e561e2aa7deeac9
Size

70KB
MD5

7399d4a76bbac5298d616f8ebef14239
SHA1

2e7bb73f6ed3b70bf46c3314e0981a3dca85ae5d
SHA256

5cd969d4c0117407303f58e6c11be221a5e8c561b8158e4a3e561e2aa7deeac9
SHA512

3bc4fc8ce0fab5f3158636ed0c7dfab316b24505cd9f25a03e02538a920d406e47b424671f4ee67a5bc5bd4866e82735265f778a9a822b092a203699af3ab334
SSDEEP

1536:uNUTKAK5b+m6OAlzxve5RSKrj43gYquXUW69mbQMUlcVtx7PgJCScH5A:uafeb+mzADwRuQYqfcba6VtxE8HW

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

5cd969d4c0117407303f58e6c11be221a5e8c561b8158e4a3e561e2aa7deeac9
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE