70288395f60db10ca46e8c7f82cf26ff9c561a1bb1f37b94772c66b4bf9ddeb6

Sharing

Copy URL

Twitter E-mail

General

Target

70288395f60db10ca46e8c7f82cf26ff9c561a1bb1f37b94772c66b4bf9ddeb6
Size

58KB
MD5

909540666e0be5c02888e6067b302ce0
SHA1

d368b9cd151801507ced173bdba765b565913012
SHA256

70288395f60db10ca46e8c7f82cf26ff9c561a1bb1f37b94772c66b4bf9ddeb6
SHA512

d8223ba2bcd2b54f0ed6ce8a433d7279cd0820c497dc7bf21c8d42d8c374d1a10230304001f7ece59666c38aa964673e2ee046296939f4c4a32089e4fe6e2106
SSDEEP

768:kAH6h31cuqDTn3DyHGI+gic1xfjYXSTTkmOkaIsAg0ORGCogxXha5a5Bk:kiE3auqu8ixLtH33sAgBwOK

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

70288395f60db10ca46e8c7f82cf26ff9c561a1bb1f37b94772c66b4bf9ddeb6
.exe windows x86

Code Sign

70:24:ca:71:51:75:33:47:1e:b8:49:66:a0:22:e9:72
Certificate

Issuer

CN=Thawte SSL CA,O=Thawte\, Inc.,C=US

Not Before

15/05/2012, 00:00

Not After

15/05/2014, 23:59

Subject

CN=*.freechal.com,OU=platform team,O=iconcube\, lnc.,L=Geumcheon-gu,ST=Seoul,C=KR

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

17/11/2006, 00:00

Not After

30/12/2020, 23:59

Subject

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:5f:2c:34:08:b2:4c:20:cd:6d:50:7e:24:4d:c9:ec
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte SSL CA,O=Thawte\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

50:77:92:4a:32:c2:a5:dc:ec:fa:4e:e9:bf:e4:c2:09:a2:0a:99:8d
Signer

Actual PE Digest

50:77:92:4a:32:c2:a5:dc:ec:fa:4e:e9:bf:e4:c2:09:a2:0a:99:8d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=*.freechal.com,OU=platform team,O=iconcube\, lnc.,L=Geumcheon-gu,ST=Seoul,C=KR

17/05/2013, 12:10
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 32KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

70:24:ca:71:51:75:33:47:1e:b8:49:66:a0:22:e9:72Certificate

Extended Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91Certificate

Key Usages

4d:5f:2c:34:08:b2:4c:20:cd:6d:50:7e:24:4d:c9:ecCertificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

50:77:92:4a:32:c2:a5:dc:ec:fa:4e:e9:bf:e4:c2:09:a2:0a:99:8dSigner

Signature Validations

Verification

17/05/2013, 12:10 Valid: false

Headers

File Characteristics

Sections

.text Size: 14KB - Virtual size: 28KB

.edata Size: 32KB - Virtual size: 40KB

.data Size: 4KB - Virtual size: 8KB

.rdata Size: - Virtual size: 4KB

70:24:ca:71:51:75:33:47:1e:b8:49:66:a0:22:e9:72
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91
Certificate

4d:5f:2c:34:08:b2:4c:20:cd:6d:50:7e:24:4d:c9:ec
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

50:77:92:4a:32:c2:a5:dc:ec:fa:4e:e9:bf:e4:c2:09:a2:0a:99:8d
Signer

17/05/2013, 12:10
Valid: false

.text
Size: 14KB - Virtual size: 28KB

.edata
Size: 32KB - Virtual size: 40KB

.data
Size: 4KB - Virtual size: 8KB

.rdata
Size: - Virtual size: 4KB