01d8e93fe917798c9a5d6d56fce27c01202ad42df3646b9abd38b9ca322333d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d8e93fe917798c9a5d6d56fce27c01202ad42df3646b9abd38b9ca322333d5
Size

346KB
MD5

448cb87627914e605631edf2995933f1
SHA1

e885e9365d5f390abd182fb48e846fe2c1d2814d
SHA256

01d8e93fe917798c9a5d6d56fce27c01202ad42df3646b9abd38b9ca322333d5
SHA512

9c4bae4cf6dd1bb883daef57f1a64f29d7c505c4da606316bb6aafa80c5e815935f49a05789db5c1702fa8a3fcf26812f1b260dc7bb123d60900383b20c6295f
SSDEEP

6144:fMW7MqdUVgVSISWfYXmjvLJE8+kTtBfxqw7tbxh4vNifO:bAgV0WgXSe8+kHpqER4v

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

01d8e93fe917798c9a5d6d56fce27c01202ad42df3646b9abd38b9ca322333d5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 336KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE