d6ab4044912863024c58e3e2590c3f053c2d7b8da5a46ce1f39ed37abdb05637

Sharing

Copy URL Twitter E-mail

General

Target

d6ab4044912863024c58e3e2590c3f053c2d7b8da5a46ce1f39ed37abdb05637
Size

10.5MB
MD5

314b82a677005e8de35ada1f42a51093
SHA1

3835d282da923d59c0e74e7de5607575f8d56d0f
SHA256

d6ab4044912863024c58e3e2590c3f053c2d7b8da5a46ce1f39ed37abdb05637
SHA512

adc5de049a1cc4262abd9a1c6a2b0692cb261a86bbf503403ed9bed2b7654fe0fce96f67cc322034de28048cf6b961ec977207b6c0e07067a4dca3b4144f7ce0
SSDEEP

196608:UQpH0Fx5ogvPYOR0GdX5Kpv25ve7Nx7Epke9uTXUQ7w1lKRrHauJBGFTvcVthwqv:UnfYOGGJ28vgNxop2TkQUHar6cYTvcVv

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6ab4044912863024c58e3e2590c3f053c2d7b8da5a46ce1f39ed37abdb05637

Files

d6ab4044912863024c58e3e2590c3f053c2d7b8da5a46ce1f39ed37abdb05637
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.5MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 167KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8.0MB - Virtual size: 13.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 673KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 3.4MB

.text Size: 1.5MB - Virtual size: 7.2MB

.rdata Size: 167KB - Virtual size: 880KB

.data Size: 8.0MB - Virtual size: 13.8MB

.idata Size: 9KB - Virtual size: 28KB

.msvcjmc Size: 512B - Virtual size: 4KB

.tls Size: 1024B - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 4KB

.rsrc Size: 673KB - Virtual size: 1.8MB

.aspack Size: 140KB - Virtual size: 140KB

.adata Size: - Virtual size: 4KB

.textbss
Size: - Virtual size: 3.4MB

.text
Size: 1.5MB - Virtual size: 7.2MB

.rdata
Size: 167KB - Virtual size: 880KB

.data
Size: 8.0MB - Virtual size: 13.8MB

.idata
Size: 9KB - Virtual size: 28KB

.msvcjmc
Size: 512B - Virtual size: 4KB

.tls
Size: 1024B - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 4KB

.rsrc
Size: 673KB - Virtual size: 1.8MB

.aspack
Size: 140KB - Virtual size: 140KB

.adata
Size: - Virtual size: 4KB