0abe1188c3456d2c8a05831b18da00641b61a117634f1413d0f0e9f0a03fe5cc

Sharing

Copy URL Twitter E-mail

General

Target

0abe1188c3456d2c8a05831b18da00641b61a117634f1413d0f0e9f0a03fe5cc
Size

81KB
MD5

25662ec6f51be50f1847825620646fce
SHA1

86018f6c7a32c116a2d76abf6d9b2f0b1a189383
SHA256

0abe1188c3456d2c8a05831b18da00641b61a117634f1413d0f0e9f0a03fe5cc
SHA512

cb26cab1ea7d24f356b9f1eff6a44b0a2a126f3b487254cf0286b1164be352655f96b4c2b8bef11bb2fe56dea9522edae034bf694a76e8d74b92f03a01ed651c
SSDEEP

1536:dOB4/J2xhQ7iAQIK2eh6CU9XIJr1YZ3tMhy4tCQ+7ozSWpGQr:MW/UnpAQ0eEJdw1YZ3tMtx+7ovBr

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

0abe1188c3456d2c8a05831b18da00641b61a117634f1413d0f0e9f0a03fe5cc
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ResumeOtherThread
SuspendOtherThread
ViKeyCheckModule
ViKeyDecraseModule
ViKeyGetModule
ViKeyGetUpdateTag
ViKeyGetVersionFlag
ViKeyRandom
ViKeySetModule
ViKeySetUpdateTag
ViKeySetVersionFlag
Vikey3DesDecrypt
Vikey3DesEncrypt
Vikey3DesHexStringDecrypt
Vikey3DesSetKey
VikeyAdminLogin
VikeyAdminLogon
VikeyClearPcChkData
VikeyDesDecrypt
VikeyDesEncrypt
VikeyDesSetKey
VikeyFind
VikeyGetAdminPassWordAttempt
VikeyGetAutoRunUrl
VikeyGetCurrentPcChkData
VikeyGetHID
VikeyGetLevel
VikeyGetMaxClientCount
VikeyGetPtroductName
VikeyGetPtroductNameA
VikeyGetSoftID
VikeyGetSoftIDString
VikeyGetTime
VikeyGetType
VikeyGetUserPassWordAttempt
VikeyHmacMD5
VikeyHmacSHA1
VikeyIsThisPc
VikeyLogoff
VikeyMD5
VikeyReadData
VikeyResetPassword
VikeySHA1
VikeySeed
VikeySetAdminPassWordAttempt
VikeySetAutoRunUrl
VikeySetMD5Key
VikeySetMaxClientCount
VikeySetNewPassword
VikeySetPcChkData
VikeySetPtroductName
VikeySetSHA1Key
VikeySetSoftID
VikeySetSoftIDString
VikeySetUserPassWordAttempt
VikeyUserLogin
VikeyUserLogon
VikeyWriteData

Sections

.text
Size: 51KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 144KB

.rdata Size: 17KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 36KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 8KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 51KB - Virtual size: 144KB

.rdata
Size: 17KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 36KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 8KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB