b32e88a862b3c8883eb58c59a2415f1aca4a7f50fcfe4f1f9492445afe7046da

Sharing

Copy URL Twitter E-mail

General

Target

b32e88a862b3c8883eb58c59a2415f1aca4a7f50fcfe4f1f9492445afe7046da
Size

81KB
MD5

b6bb72eee79431b23be978a6e40b15e2
SHA1

a965bfe2be6285a79f679cb5699f6f903836285c
SHA256

b32e88a862b3c8883eb58c59a2415f1aca4a7f50fcfe4f1f9492445afe7046da
SHA512

ff1e494e1be109d3dc637d7700f08e20ee823ddfa6c57d27a9abaf31ba21b4ad3120490d3a73381362ecacbcd7543d47dcc121a9a36c586fa11aad650dce279c
SSDEEP

1536:4OB4/J2xhQ7iAQIK2eh6CU9XIJr1YZ3tMhy4tCQ+7ozSWpGQr:ZW/UnpAQ0eEJdw1YZ3tMtx+7ovBr

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

b32e88a862b3c8883eb58c59a2415f1aca4a7f50fcfe4f1f9492445afe7046da
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ResumeOtherThread
SuspendOtherThread
ViKeyCheckModule
ViKeyDecraseModule
ViKeyGetModule
ViKeyGetUpdateTag
ViKeyGetVersionFlag
ViKeyRandom
ViKeySetModule
ViKeySetUpdateTag
ViKeySetVersionFlag
Vikey3DesDecrypt
Vikey3DesEncrypt
Vikey3DesHexStringDecrypt
Vikey3DesSetKey
VikeyAdminLogin
VikeyAdminLogon
VikeyClearPcChkData
VikeyDesDecrypt
VikeyDesEncrypt
VikeyDesSetKey
VikeyFind
VikeyGetAdminPassWordAttempt
VikeyGetAutoRunUrl
VikeyGetCurrentPcChkData
VikeyGetHID
VikeyGetLevel
VikeyGetMaxClientCount
VikeyGetPtroductName
VikeyGetPtroductNameA
VikeyGetSoftID
VikeyGetSoftIDString
VikeyGetTime
VikeyGetType
VikeyGetUserPassWordAttempt
VikeyHmacMD5
VikeyHmacSHA1
VikeyIsThisPc
VikeyLogoff
VikeyMD5
VikeyReadData
VikeyResetPassword
VikeySHA1
VikeySeed
VikeySetAdminPassWordAttempt
VikeySetAutoRunUrl
VikeySetMD5Key
VikeySetMaxClientCount
VikeySetNewPassword
VikeySetPcChkData
VikeySetPtroductName
VikeySetSHA1Key
VikeySetSoftID
VikeySetSoftIDString
VikeySetUserPassWordAttempt
VikeyUserLogin
VikeyUserLogon
VikeyWriteData

Sections

.text
Size: 51KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 144KB

.rdata Size: 17KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 36KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 8KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 51KB - Virtual size: 144KB

.rdata
Size: 17KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 36KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 8KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB