53bf3437b687d2031cc012662f1b7205e9cdba6a42e6d459f099ae4f03fd2f91

Sharing

Copy URL

Twitter E-mail

General

Target

53bf3437b687d2031cc012662f1b7205e9cdba6a42e6d459f099ae4f03fd2f91
Size

600KB
MD5

4a014dd3150dbc2e97c144427b69d78d
SHA1

f9ff4733d956e9190828a9a51d1fb6b840b3e097
SHA256

53bf3437b687d2031cc012662f1b7205e9cdba6a42e6d459f099ae4f03fd2f91
SHA512

5ec259e2dceef0c4439eaeef36834735de6e863e0884848ebbaf463076195b4e7a8395756f53cb02432eddc4c36df6853214f754c677ac5bb977bf23526e7645
SSDEEP

12288:Apswz0/O0ycxLmrIGPcTnQRLYcZgCCJznUjTOfYXiuVlDB2lEUP:8z0/5xmsLAB6C0ojTO2i4JAlEy

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

53bf3437b687d2031cc012662f1b7205e9cdba6a42e6d459f099ae4f03fd2f91
.exe windows x86

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

Issuer

CN=Sunlight Studio

Not Before

18-11-2019 19:37

Not After

31-12-2039 23:59

Subject

CN=tbtool

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7a
Certificate

Issuer

CN=Sunlight Studio

Not Before

18-11-2019 19:13

Not After

31-12-2039 23:59

Subject

CN=Sunlight Studio

2c:12:b0:92:26:28:a5:84:a5:b6:38:35:b2:c8:19:ef:7b:d3:f8:1c
Signer

Actual PE Digest

2c:12:b0:92:26:28:a5:84:a5:b6:38:35:b2:c8:19:ef:7b:d3:f8:1c

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=tbtool

28-10-2022 15:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 354KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 33KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:ddCertificate

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7aCertificate

2c:12:b0:92:26:28:a5:84:a5:b6:38:35:b2:c8:19:ef:7b:d3:f8:1cSigner

Signature Validations

Verification

28-10-2022 15:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 354KB - Virtual size: 992KB

.rdata Size: 84KB - Virtual size: 220KB

.data Size: 28KB - Virtual size: 260KB

.rsrc Size: 2KB - Virtual size: 96KB

.reloc Size: 33KB - Virtual size: 56KB

.pack Size: 96KB - Virtual size: 96KB

.adata Size: - Virtual size: 4KB

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7a
Certificate

2c:12:b0:92:26:28:a5:84:a5:b6:38:35:b2:c8:19:ef:7b:d3:f8:1c
Signer

28-10-2022 15:04
Valid: false

.text
Size: 354KB - Virtual size: 992KB

.rdata
Size: 84KB - Virtual size: 220KB

.data
Size: 28KB - Virtual size: 260KB

.rsrc
Size: 2KB - Virtual size: 96KB

.reloc
Size: 33KB - Virtual size: 56KB

.pack
Size: 96KB - Virtual size: 96KB

.adata
Size: - Virtual size: 4KB