36e03914a708f00d03dc0c388584fd11dcd94e0f58d73be23a8ea88d826e9abb

Sharing

Copy URL Twitter E-mail

General

Target

36e03914a708f00d03dc0c388584fd11dcd94e0f58d73be23a8ea88d826e9abb
Size

5.0MB
MD5

bbee00798c4f4502ede3579e493a80c9
SHA1

f95ab09beecedaefa559c44e9784551036ccc1e3
SHA256

36e03914a708f00d03dc0c388584fd11dcd94e0f58d73be23a8ea88d826e9abb
SHA512

a8f98eae46484470cfa9624a89f0972bcc7cd38d07c082d3b1757cb9b6375cca7748765cc4e985e492cc6876e0e19b2c46a7f0f5e0b2997a62ab1aa24e3b5cdf
SSDEEP

98304:ToIIvGk1VkVuXb3JCYrHNnfgILW5rkwYY4fYp/hjHcc37XDtrx5gPS:ToIfk1ViuXb3JdxI2nwYYcYbj8kXxN5D

Score

7^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

36e03914a708f00d03dc0c388584fd11dcd94e0f58d73be23a8ea88d826e9abb
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.8MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.custom
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 198KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.8MB - Virtual size: 8.7MB

.rdata Size: 720KB - Virtual size: 2.3MB

.data Size: 21KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.gfids Size: 1024B - Virtual size: 4KB

_RDATA Size: 3KB - Virtual size: 8KB

.rodata Size: 512B - Virtual size: 4KB

.custom Size: 512B - Virtual size: 4KB

.rsrc Size: 1.1MB - Virtual size: 3.9MB

.reloc Size: 198KB - Virtual size: 472KB

.UPX Size: 176KB - Virtual size: 176KB

.adata Size: - Virtual size: 4KB

.text
Size: 2.8MB - Virtual size: 8.7MB

.rdata
Size: 720KB - Virtual size: 2.3MB

.data
Size: 21KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB

.gfids
Size: 1024B - Virtual size: 4KB

_RDATA
Size: 3KB - Virtual size: 8KB

.rodata
Size: 512B - Virtual size: 4KB

.custom
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1.1MB - Virtual size: 3.9MB

.reloc
Size: 198KB - Virtual size: 472KB

.UPX
Size: 176KB - Virtual size: 176KB

.adata
Size: - Virtual size: 4KB