3acc1d37a19bb9c202bebd37dd3c632fe7f06cd916c5255f5db9b6300c9fc5b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3acc1d37a19bb9c202bebd37dd3c632fe7f06cd916c5255f5db9b6300c9fc5b2
Size

1.8MB
MD5

59d72a64e5ccecd5cbe4d92e01a301bb
SHA1

cf1de71e1bb16552f4ff5adaf23ceabf6a70e774
SHA256

3acc1d37a19bb9c202bebd37dd3c632fe7f06cd916c5255f5db9b6300c9fc5b2
SHA512

8fc3cb2bb81084fb86f9f14777b7888f7088283fbe7acdd53e67fabfd56dac7c67ddb4160851d293ccb863aa2d6598836f1e5c0b159b532bee7f643b65c912cf
SSDEEP

24576:y247hvUq4GA0Pgukkw7xBdK2muoKL9UfHBsAMg9u2qA6NceZJm8Xi1sNr3JG/4GL:yvntPjNOxBDmpKLCrPz4NnmY8w1G/C

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

3acc1d37a19bb9c202bebd37dd3c632fe7f06cd916c5255f5db9b6300c9fc5b2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 899KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 143KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 657KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE