945220e4783aaee721b8f1ffbe4719ddcb322725f71e85bf17e5b66532e743cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

945220e4783aaee721b8f1ffbe4719ddcb322725f71e85bf17e5b66532e743cf
Size

484KB
MD5

8fd6f4c6ddcd3de4a0764ef8b80f882d
SHA1

af1cc7ffc3eee93bf2381889df902b344c5c2d49
SHA256

945220e4783aaee721b8f1ffbe4719ddcb322725f71e85bf17e5b66532e743cf
SHA512

97063648afd1aafa8a629649f7ac22f8119aa1b8934ca8d73f9e8c05e78fad045bb8f705beb7aa648b1d6119a179fbf7df28653bd7b0e043cd080d166f346a1b
SSDEEP

6144:1T+iHfaaCmGgxePVSjRVybEXPaMERNsxeiLRDxdkrY8AZZ4gc1QSFTVWt8j:93LCDAeURoHM+oRDArUZigcXVkM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

945220e4783aaee721b8f1ffbe4719ddcb322725f71e85bf17e5b66532e743cf
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

��

Sections

.text
Size: 282KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE