50d09f5615f7a407893eae5a669d0ab43288143597fef562fa9d65f5f26b296b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50d09f5615f7a407893eae5a669d0ab43288143597fef562fa9d65f5f26b296b
Size

320KB
MD5

e293cc6560bc5115e3c8cf472147fc4f
SHA1

9b2b6ce37e64b62e310e013f2352b50a34acdb4d
SHA256

50d09f5615f7a407893eae5a669d0ab43288143597fef562fa9d65f5f26b296b
SHA512

cb94dc291267a579354e4456f4344c00234558c330097e9a77eeb773f92703466cd2f5de7692f161c58adeca8f6a7fc589dde5455929ae04dd3e17bd46f2637a
SSDEEP

6144:EpamlbvywpPUKafO/CxWWIB9mZQIlO4pNM02TnDCcrtW6cNt34Nn455G4JWZHZF:zoywOK7LWIAnlJNpkT5Jyg45g4JWZHX

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/StarName.exe	aspack_v212_v242

Files

50d09f5615f7a407893eae5a669d0ab43288143597fef562fa9d65f5f26b296b
.rar
StarName.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 288KB - Virtual size: 760KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
使用说明.txt
更多软件下载.url
.url
系统之家.url
.url
绿色软件.reg