8c90de3b03aa1cd36059240c438e00307fe096cf3051eadf73bdfc1d1c3fe779

General

Target

8c90de3b03aa1cd36059240c438e00307fe096cf3051eadf73bdfc1d1c3fe779
Size

53KB
MD5

ded7286cc6b09084e0be7d784677cd89
SHA1

bb9395870872707a8fa03166c7cd3090913c7ab3
SHA256

8c90de3b03aa1cd36059240c438e00307fe096cf3051eadf73bdfc1d1c3fe779
SHA512

c559972f194002925012a0163908876b355f1eb26c97b4aa3acc1a4a37434b46084260973824a5282deb4607f2c4d421d16bf3d8a6df7dacc6cf93cce711a2ae
SSDEEP

1536:VKdKlnHrd+XukNRxJ7N9sM07g3U8A+WW27O:EdMaZxdLV0E3xPQq

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

8c90de3b03aa1cd36059240c438e00307fe096cf3051eadf73bdfc1d1c3fe779
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

vtcp_accept
vtcp_bind
vtcp_cleanup
vtcp_close
vtcp_connect
vtcp_ctl
vtcp_geterror
vtcp_getpeername
vtcp_getsockname
vtcp_getsockopt
vtcp_listen
vtcp_qio_close
vtcp_qio_create
vtcp_qio_get
vtcp_qio_post
vtcp_qio_set
vtcp_recv
vtcp_recvfrom
vtcp_send
vtcp_sendto
vtcp_setsockopt
vtcp_socket
vtcp_socketshare
vtcp_startup

Sections

.text
Size: 27KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 52KB

.rdata Size: 13KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 8KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 52KB

.rdata
Size: 13KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 8KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB