fb62732c02a7c9797f19f7a448e9adb3d687381302357783f4e1979b40401ab0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb62732c02a7c9797f19f7a448e9adb3d687381302357783f4e1979b40401ab0
Size

484KB
MD5

196c50e639cf00348e15126fcf574b68
SHA1

f1a5d294f7ebcfe2fa16cd5a23ec8ee25de11f47
SHA256

fb62732c02a7c9797f19f7a448e9adb3d687381302357783f4e1979b40401ab0
SHA512

3525abb3396cee931561936ccfcd75be67a0a61b6697150506cf3176d1953b6e25075bb493c4d430aab0a3e34f1495cc93d8dbbfb86dad9a46c6e87aeb2f1ade
SSDEEP

6144:7DjSm+Pk/SaeyCDYMT7TPW1JPSucy91RfsIY5ncJ5fe25Bo9r22vhUSsJ7X8T1Q0:7P7iieV//q1x91wnc3fQRFKSseTo8B

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

fb62732c02a7c9797f19f7a448e9adb3d687381302357783f4e1979b40401ab0
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

��

Sections

.text
Size: 282KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE