d5be93a2be5cf0e9193cb58ddbdba3c37fc08c913e77c2da41f2a7354dc46ce6

Sharing

Copy URL Twitter E-mail

General

Target

d5be93a2be5cf0e9193cb58ddbdba3c37fc08c913e77c2da41f2a7354dc46ce6
Size

296KB
MD5

8ef623f37a4fa9346a518ba877671b7f
SHA1

3cd14a71d023102f4b255be6655b527b71dd3b13
SHA256

d5be93a2be5cf0e9193cb58ddbdba3c37fc08c913e77c2da41f2a7354dc46ce6
SHA512

b0bac40c1a135e88a31912551dc84dacb96e9a78391eed48f956ff5307d2f096b1fbd6a23f7777cf877090b994a4703c5eeb57338a60b673eb224b259791bb38
SSDEEP

6144:fMhv+86+luWDiIMeouqX+GqXMPvrTKUSbxI:fev+86+xmIlnqkXivrFOxI

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

d5be93a2be5cf0e9193cb58ddbdba3c37fc08c913e77c2da41f2a7354dc46ce6
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CommFree
CommInit
ConnectTerminal
ControlerParam
DecryptString
DeleteOfflineData
EncryptString
EraseEntireFlash
GetAddrPoint
GetOfflineData
GetTerminalDateTime
GetTerminalMemoryInfo
GetTerminalMemoryInfo1
GetTerminalStatus
GetTerminalStatusQuick
GetTerminalVersion
ReadFlashData
RegisterCard
RegisterHoliday
RegisterPersonGroup
RegisterTimeSegs
RemoteBrushCard
RemoteControl
ResetTerminal
ResetTerminalH
SetTerminalBaudRate
SetTerminalDateTime
SetTerminalDateTimeCustom
TCPClearBuffer
TCPConnect
TCPDisConnect
TCPModuleSearch
TCPModuleSetup
TCPReceiveBuffer
TCPSendBuffer
TermDefaultCardChkPw
TermDefaultCardFormat
TermDefaultCardRead
TermDefaultCardWrite
TerminalDisplayMessage
TerminalICAuth
TerminalICChangePW
TerminalICChangePW_B
TerminalICHalt
TerminalICRead
TerminalICRequest
TerminalICRestore
TerminalICValueOperate
TerminalICValueRead
TerminalICValueWrite
TerminalICWrite
TerminalSpeakErr
TerminalSpeakOK
UnRegisterCard
VerifyInterface1
VerifyInterface2
WriteFlashData

Sections

CODE
Size: 181KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 76KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 181KB - Virtual size: 464KB

DATA Size: 76KB - Virtual size: 96KB

BSS Size: - Virtual size: 36KB

.idata Size: 3KB - Virtual size: 12KB

.edata Size: 2KB - Virtual size: 4KB

.reloc Size: 18KB - Virtual size: 32KB

.rsrc Size: 9KB - Virtual size: 24KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

CODE
Size: 181KB - Virtual size: 464KB

DATA
Size: 76KB - Virtual size: 96KB

BSS
Size: - Virtual size: 36KB

.idata
Size: 3KB - Virtual size: 12KB

.edata
Size: 2KB - Virtual size: 4KB

.reloc
Size: 18KB - Virtual size: 32KB

.rsrc
Size: 9KB - Virtual size: 24KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB