f504abb675565606c9243baedaddf164c894517dbfd41a3da6415fc8437a014d

Sharing

Copy URL

Twitter E-mail

General

Target

f504abb675565606c9243baedaddf164c894517dbfd41a3da6415fc8437a014d
Size

10.6MB
MD5

c73c248801118781d994109b740d2c3e
SHA1

ebbbf99860b5238678d4d9a8628a7d93c7595c64
SHA256

f504abb675565606c9243baedaddf164c894517dbfd41a3da6415fc8437a014d
SHA512

74e46a11f8ad600f1be16c2e481e05664e4be2241db336819a3f66fe5776f4452a266f2a27790324f52b91280abfd1bd3085b6d78c72bd844335ede52d87f099
SSDEEP

196608:oLLNPnl25q3/U6WuH/Mk2wlb9JKg12H+cVGzoLL8odP0Zn1ssGD3Y4pL2v:OJnl2QsfufMk2Mb/2FVbzP0Z1ssGD3lZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f504abb675565606c9243baedaddf164c894517dbfd41a3da6415fc8437a014d

Files

f504abb675565606c9243baedaddf164c894517dbfd41a3da6415fc8437a014d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.5MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 167KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8.1MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 673KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 3.4MB

.text Size: 1.5MB - Virtual size: 7.2MB

.rdata Size: 167KB - Virtual size: 880KB

.data Size: 8.1MB - Virtual size: 10.5MB

.idata Size: 9KB - Virtual size: 28KB

.msvcjmc Size: 512B - Virtual size: 4KB

.tls Size: 1024B - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 4KB

.rsrc Size: 673KB - Virtual size: 1.8MB

.aspack Size: 122KB - Virtual size: 124KB

.adata Size: - Virtual size: 4KB

.textbss
Size: - Virtual size: 3.4MB

.text
Size: 1.5MB - Virtual size: 7.2MB

.rdata
Size: 167KB - Virtual size: 880KB

.data
Size: 8.1MB - Virtual size: 10.5MB

.idata
Size: 9KB - Virtual size: 28KB

.msvcjmc
Size: 512B - Virtual size: 4KB

.tls
Size: 1024B - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 4KB

.rsrc
Size: 673KB - Virtual size: 1.8MB

.aspack
Size: 122KB - Virtual size: 124KB

.adata
Size: - Virtual size: 4KB