35d1192113012fecf7b0e908a4f923941c4f529175dbb690ce6ec4adfea6bea9 | Triage

Sharing

General

Target

35d1192113012fecf7b0e908a4f923941c4f529175dbb690ce6ec4adfea6bea9
Size

437KB
MD5

601d1a8fd2efd5d524c36fddca3f64af
SHA1

96ef20d9e6b79c873fe367976b362f57c5feab4a
SHA256

35d1192113012fecf7b0e908a4f923941c4f529175dbb690ce6ec4adfea6bea9
SHA512

a1af010d193f1c82941005d47bf4a55d9b961e18ace062c4206a94cb60e1e3f15afb23df95afef2675a9d3835737004204485bf171c90c5d16a93ed8f7bd0f67
SSDEEP

6144:5oNPAqviXmC/r2ck6YaCBdX26Nu2NwA97YSOiWOpkTcc/y8rsGVaMZVk4CgOLPDo:6JSrynaCBQgF90cWVgPGVaM7HjOTM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

Files

35d1192113012fecf7b0e908a4f923941c4f529175dbb690ce6ec4adfea6bea9
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_��ӳ��

Sections

.text
Size: 275KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE