449ad55918782dd2530009e9c580f93a558db4d228bc5fd1cd02f98fb1680490

General

Target

449ad55918782dd2530009e9c580f93a558db4d228bc5fd1cd02f98fb1680490
Size

654KB
MD5

7ae66d828af0df947224f4946e2578ff
SHA1

cac36e384f0fdb7533fbcb0f093e18e1aa063a89
SHA256

449ad55918782dd2530009e9c580f93a558db4d228bc5fd1cd02f98fb1680490
SHA512

55fd6d5f7c0770e4cbe98f86904aa4ad4d144c485dc7528db2c8eeb692c2f5ec22b152baae911eb1369c354c624e4db896959805363990987da7950679d9cbce
SSDEEP

12288:QpW2k1JWFb7uDFgmiju4aKKZfe/Wr19tbeHgCcoCYbH6OxKtCpZcHVReP:FJWF+FgmijuRo/W5b6A8aOrs

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

449ad55918782dd2530009e9c580f93a558db4d228bc5fd1cd02f98fb1680490
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ActiveRequest
AddToRequestStudy
ArchievToPACSImage
ArchievToPACSReport
CloseStudy
DeleteRequest
DllGetVersion
EncBMPtoDCMAndSend
GetEmptyRequest
GetPrintImagesPath
GetRISReport
GetRequestFlowNo
ProcessBMPFile
RequestStudy
SaveChangeLogToFile
SavePatientImage
SaveReportToFile
SaveStudyReportToFile
ShowStudy
ShowStudyUsingHISNumber
ShowStudyUsingRequestID

Sections

.text
Size: 460KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 31KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 460KB - Virtual size: 1.6MB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 63KB - Virtual size: 316KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 31KB - Virtual size: 72KB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 460KB - Virtual size: 1.6MB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 63KB - Virtual size: 316KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 31KB - Virtual size: 72KB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB