e17065ef97296d45e1dc6e86d91c13bc69ccbab3d9bd33a9fda9b8a71cc81fb5 | Triage

Sharing

General

Target

e17065ef97296d45e1dc6e86d91c13bc69ccbab3d9bd33a9fda9b8a71cc81fb5
Size

4.9MB
MD5

978416f7b00b6b01780140fc5a002963
SHA1

bf86fa1fc902a7af77a51d9a7e8d7805db0d01c3
SHA256

e17065ef97296d45e1dc6e86d91c13bc69ccbab3d9bd33a9fda9b8a71cc81fb5
SHA512

4713e0e4db89f63ddb041f9e9b5d881dd452c7b912c4a91c3ad459354b243adde039e5cdc031352bf1f893ff5c90383217b4dbb563d6cda02941611f6587fcfd
SSDEEP

98304:uxxSruAGbl51kDt/H9bieeN7AaZRdZDHLCh/MX/kBn/f4BlR/fZWN7:CSrk31Y1bdeNkaZR/nCh/MX/k2DR/hs

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

e17065ef97296d45e1dc6e86d91c13bc69ccbab3d9bd33a9fda9b8a71cc81fb5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 837KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 108KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.FK0
Size: 1024KB - Virtual size: 8.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.FK1
Size: 1.7MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 269KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE