cd6bb63b606d04a6c7b36a4cebddc7e1d2d6ec55d8d83f91b11d4308307aa88b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd6bb63b606d04a6c7b36a4cebddc7e1d2d6ec55d8d83f91b11d4308307aa88b
Size

91KB
MD5

8ee6be30edf8562692f8de2e21c3bb0f
SHA1

9b29c4f95749e6f1b1b20e5f0c84a49981ab1607
SHA256

cd6bb63b606d04a6c7b36a4cebddc7e1d2d6ec55d8d83f91b11d4308307aa88b
SHA512

7aa6390a6663d5a9cd4609d984968b00768736fca376257728ce7066697458576316a4c654a0dbf3b7b09c2aab4053fc367101d5d9187b6e85ca384f4ae254de
SSDEEP

1536:RhbcFcAaPIWJhiEShM4wNFkqLOuvSJSuxPW30jik8a2TyMy9Y6Ox72txt1VFv+ST:LbcuXIWJnvvjLOWpGLp2TyP9YdN2tJum

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

cd6bb63b606d04a6c7b36a4cebddc7e1d2d6ec55d8d83f91b11d4308307aa88b
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 63KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE