de168d5bd2c82133ff256bfb66dc1edf65d5648caa21becbece520cbdd6af0ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de168d5bd2c82133ff256bfb66dc1edf65d5648caa21becbece520cbdd6af0ef
Size

1.0MB
MD5

f9400f623df9625076d2e95b40b2aec6
SHA1

167926443c96fd9dd33aeb7cc8fb8eacfe0d8ecb
SHA256

de168d5bd2c82133ff256bfb66dc1edf65d5648caa21becbece520cbdd6af0ef
SHA512

48bf50155bfc996f5f5e6a7a396899ce79b50fbfd06732b344c2a156689044c23b5eff6c39a41f47e8cd9bc224a265edcf38e16507a7539284c245b86d3fef8a
SSDEEP

12288:KymRJKBvfCAx1EQcKSviirY5RuEBSphHKQb6nx+Xpxhr5yeBi:KymelCAdHS6ir+RubhHhiIpxhFo

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

de168d5bd2c82133ff256bfb66dc1edf65d5648caa21becbece520cbdd6af0ef
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

svchost

Sections

.text
Size: 339KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 46KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 30KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE