22132e4879cf7d0666522ad63f3f874dc72d4e0e50c3a0b952d6bd3d0e5b954c

Sharing

Copy URL Twitter E-mail

General

Target

22132e4879cf7d0666522ad63f3f874dc72d4e0e50c3a0b952d6bd3d0e5b954c
Size

607KB
MD5

0da233ed60d5ebf2d3aaba0a8cae7023
SHA1

cae135adb2eedaace361de374be7ec74058d1e8b
SHA256

22132e4879cf7d0666522ad63f3f874dc72d4e0e50c3a0b952d6bd3d0e5b954c
SHA512

4b014964c37cd434c8b2563b591175177d46e1718dab51f5608c5f0a1a48e7eb64493597926ad333a4a0c2af076f4c0983b20abc52267ed99ddcdc69f27af1e9
SSDEEP

12288:NZOzVd730NGbds4drhf7CiB5H2Ayr2r6B4ExIG01Jrf8xRosulDB2lEUs:N0zVZdTl0iBJ2Ayq6zIG01JL9suJAlEN

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

22132e4879cf7d0666522ad63f3f874dc72d4e0e50c3a0b952d6bd3d0e5b954c
.exe windows x86

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

Issuer

CN=Sunlight Studio

Not Before

18/11/2019, 19:37

Not After

31/12/2039, 23:59

Subject

CN=tbtool

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7a
Certificate

Issuer

CN=Sunlight Studio

Not Before

18/11/2019, 19:13

Not After

31/12/2039, 23:59

Subject

CN=Sunlight Studio

d1:b3:c7:90:b2:78:55:c2:87:75:6c:b4:fe:c9:75:70:1b:2e:55:c8
Signer

Actual PE Digest

d1:b3:c7:90:b2:78:55:c2:87:75:6c:b4:fe:c9:75:70:1b:2e:55:c8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=tbtool

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 349KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 98KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 31KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:ddCertificate

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7aCertificate

d1:b3:c7:90:b2:78:55:c2:87:75:6c:b4:fe:c9:75:70:1b:2e:55:c8Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 349KB - Virtual size: 952KB

.rdata Size: 98KB - Virtual size: 4.2MB

.data Size: 28KB - Virtual size: 260KB

.rsrc Size: 2KB - Virtual size: 96KB

.reloc Size: 31KB - Virtual size: 56KB

.aspack Size: 96KB - Virtual size: 96KB

.adata Size: - Virtual size: 4KB

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7a
Certificate

d1:b3:c7:90:b2:78:55:c2:87:75:6c:b4:fe:c9:75:70:1b:2e:55:c8
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 349KB - Virtual size: 952KB

.rdata
Size: 98KB - Virtual size: 4.2MB

.data
Size: 28KB - Virtual size: 260KB

.rsrc
Size: 2KB - Virtual size: 96KB

.reloc
Size: 31KB - Virtual size: 56KB

.aspack
Size: 96KB - Virtual size: 96KB

.adata
Size: - Virtual size: 4KB