171cb4d576151dca4c7b5a028e5bcdaea571024983981eeedaa191b85ce3b1e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171cb4d576151dca4c7b5a028e5bcdaea571024983981eeedaa191b85ce3b1e6
Size

662KB
MD5

d9ed09666107e5f6514c068345bab72e
SHA1

e9bece3c07750543c9fc87001091cc48e7293e93
SHA256

171cb4d576151dca4c7b5a028e5bcdaea571024983981eeedaa191b85ce3b1e6
SHA512

ecbae4f8854e4a9fa0653a22231b4072cd2d25eb7fe8db3d40985a02e3f7abb208ddc01f40218e9e8332937323682ec4748e1dd02deb2c5a06d644ad07edd5ff
SSDEEP

12288:3T05ObReG0/BCHM3/+O5vEj2oveMukQxtWFSklm9rEALShlqTBwWolq1UouMR/TT:3Tt4XwHD0EjVvemDueXqur8UBM5rTQjm

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

171cb4d576151dca4c7b5a028e5bcdaea571024983981eeedaa191b85ce3b1e6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 336KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 260KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sp
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE