98a77da45c34bb839bfbd0c7caaa461d0696e4aca5e9ff5b291aacef8f0152df | Triage

Sharing

General

Target

98a77da45c34bb839bfbd0c7caaa461d0696e4aca5e9ff5b291aacef8f0152df
Size

788KB
MD5

bea1aa12e74f0d8860a0d1795163d7f1
SHA1

66b4b197141595b82687aaf43cc7e6e5323c61b9
SHA256

98a77da45c34bb839bfbd0c7caaa461d0696e4aca5e9ff5b291aacef8f0152df
SHA512

5ea76331df9ee3daf0f6fdf9bf0764e341b6a5268e2f0676daeaf03740c3e7f95d9be0f3d8b25aab8317d83939052c2b8a35ec3b882f818d952c33ac086d7cd7
SSDEEP

24576:Qs8o3HJ9GSB46iolB6V9juLniFSwIwjJt:Qs8eJmolcFL9

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

Files

98a77da45c34bb839bfbd0c7caaa461d0696e4aca5e9ff5b291aacef8f0152df
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 331KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 91KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 348KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE