bfff9a58b0b22edc0b36717e5db4ab858f8283b90724677d1982291bd6eb89f1 | Triage

Sharing

General

Target

bfff9a58b0b22edc0b36717e5db4ab858f8283b90724677d1982291bd6eb89f1
Size

791KB
MD5

9e6ccd402626ba3f026f11c4a3370e03
SHA1

6161c55c46a112b6223e7cb2628b01f8dce2a4a9
SHA256

bfff9a58b0b22edc0b36717e5db4ab858f8283b90724677d1982291bd6eb89f1
SHA512

3229af06197a38f52a528c8478c20e3915385bec0c699d7d9c51c12502e852fe4a36998a82a781cf46b7b6f45f0e7920002342a03247d729c799916ccccf622f
SSDEEP

24576:jgQJsbRY7F0LuIC9YX4jdDuLmeuQV/yaoMZq740i:jMbRl7C9o4pVXM/yaoMIM0

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

Files

bfff9a58b0b22edc0b36717e5db4ab858f8283b90724677d1982291bd6eb89f1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 331KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 91KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 348KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE