b7be87be5486e486452985940f361d5f0f98022a4d86ba5e1d23a6307fc6cbf1

Sharing

Copy URL Twitter E-mail

General

Target

b7be87be5486e486452985940f361d5f0f98022a4d86ba5e1d23a6307fc6cbf1
Size

2.0MB
MD5

bd43f70c5fd6a5dd69821f74fcbacf59
SHA1

50c0186d3b6d0f93a3666637f32d6fc8ddc0432b
SHA256

b7be87be5486e486452985940f361d5f0f98022a4d86ba5e1d23a6307fc6cbf1
SHA512

b605d95aa207b7d4a9cc0fbb78b3f83e7d42ad2afbdc50ede12ec9485e2c1ee3224b08576b84a4274ce5d3a9e1ba6891835e1b48c246f331b2fc988ea6dacf01
SSDEEP

49152:TdWASQXKvQ0nWiQxqu6Tjuo4ZGMsPRGYX/JYHC7qWreFzPvrU3ZC:5WTQWQULuoH3FPKC7qWKJHp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

b7be87be5486e486452985940f361d5f0f98022a4d86ba5e1d23a6307fc6cbf1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 117KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 722KB - Virtual size: 976KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 117KB - Virtual size: 296KB

.data Size: 722KB - Virtual size: 976KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 1KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 1.1MB - Virtual size: 1.5MB

.reloc Size: - Virtual size: 20KB

.aspack Size: 9KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

.text
Size: 117KB - Virtual size: 296KB

.data
Size: 722KB - Virtual size: 976KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1.1MB - Virtual size: 1.5MB

.reloc
Size: - Virtual size: 20KB

.aspack
Size: 9KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB