aa68309cb73684aa844260a7baab6658a3aaac7780f21de07831a72cab871613 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa68309cb73684aa844260a7baab6658a3aaac7780f21de07831a72cab871613
Size

767KB
MD5

52b9c42827915020c520637c5eca2ef3
SHA1

ce3a4705d343f7c9aced93eb4d6e137af0f6b11d
SHA256

aa68309cb73684aa844260a7baab6658a3aaac7780f21de07831a72cab871613
SHA512

3183d3b11e3741ed632b340f61bf13ac6801fc5ab07761f34406193d416f7a1aff890cf332c8713b0919148d77dff29d5dddaafd339e21ac6cc4dd92bb0e0e45
SSDEEP

12288:9y0Cub07UMcX3S2KJSxUBnf0Zv/XebjHg5kWtTXSjz87WTMfC5siMQe79TV:9Bz0YXu5BsZ4Hg5kWtmjsom+sibeH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

aa68309cb73684aa844260a7baab6658a3aaac7780f21de07831a72cab871613
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 502KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 43KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE