1cb4ac3318581d7d969c6969a3343a5b694ab010ccaeb045d4ac3ce0d96af141 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cb4ac3318581d7d969c6969a3343a5b694ab010ccaeb045d4ac3ce0d96af141
Size

441KB
MD5

cb8b95af8967e3c5462dfccec964206e
SHA1

506f7c50df08097a6af04589580a73dca34cbc11
SHA256

1cb4ac3318581d7d969c6969a3343a5b694ab010ccaeb045d4ac3ce0d96af141
SHA512

e6acfe7ba924d52617363595dc3203d32c63602cc0502d8065e320d383448f8414f1f3fa5c75b54e88f84a567dc84ff0eedd983bafa8b13509c8514a1e80ef96
SSDEEP

12288:73xHCdgaDqJy/Vqvon5mg8VTwthEJovE:zxy/qw/8A77tIR

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

1cb4ac3318581d7d969c6969a3343a5b694ab010ccaeb045d4ac3ce0d96af141
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 308KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 70KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE