fbce188ddc380616ee12420894d6b640a257a797141e6e0a0e9e5a3c64f66a03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbce188ddc380616ee12420894d6b640a257a797141e6e0a0e9e5a3c64f66a03
Size

116KB
MD5

74893da865fb1e9163c134a86026543b
SHA1

79ecc8ede2149d985badcd129b8d84ce3fd22970
SHA256

fbce188ddc380616ee12420894d6b640a257a797141e6e0a0e9e5a3c64f66a03
SHA512

e8f09a55d6ea0b353cf19d583d9b4bbf5180061a357e333f5bdacefc6d746eca69c9123532ed1b78c9f55fe1c87d913a1087b2a19de4cf8858e88da594852634
SSDEEP

3072:MSBzux/yFw4R2cw/6CkdPR+NaBewfJDSkkuB1HTP3PjceRWrYXJboIVAhl1ILy7:MSZq/yy7cw/6CoPMaBewfHr3HTP3Pjcv

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

fbce188ddc380616ee12420894d6b640a257a797141e6e0a0e9e5a3c64f66a03
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

FakedInterface

Sections

.text
Size: 65KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yt
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE