167036b32e52e0ec6b709e2d285d4223700a0bb8205b326e6b5a4018104a1821

Sharing

Copy URL Twitter E-mail

General

Target

167036b32e52e0ec6b709e2d285d4223700a0bb8205b326e6b5a4018104a1821
Size

603KB
MD5

9016454ae7a341ffdc88c7221f0fd55c
SHA1

adeb471069e2e6e57dd5ec1cb2f180ee90ef670e
SHA256

167036b32e52e0ec6b709e2d285d4223700a0bb8205b326e6b5a4018104a1821
SHA512

99c33e9f914eb08f5baa02bc99092fce568643bf9fdbb11e4e148b5bd1aa38a28b97a2b5a8763b3d36b0b504dc298fb4d4cebf66a868ad69387292c7888558ec
SSDEEP

12288:4cU2RWd/yk9aq6olLeSCXU2hmaeOdQmQF7xo3OBg+AmtyWYulDB2lEUf:4JOW9ykxlqSmb8odQH0OBvAmtkuJAlES

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

167036b32e52e0ec6b709e2d285d4223700a0bb8205b326e6b5a4018104a1821
.exe windows x86

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

Issuer

CN=Sunlight Studio

Not Before

18/11/2019, 19:37

Not After

31/12/2039, 23:59

Subject

CN=tbtool

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7a
Certificate

Issuer

CN=Sunlight Studio

Not Before

18/11/2019, 19:13

Not After

31/12/2039, 23:59

Subject

CN=Sunlight Studio

e0:1c:66:af:58:3f:18:01:2d:81:3f:a0:51:3a:65:22:2e:ff:8b:1a
Signer

Actual PE Digest

e0:1c:66:af:58:3f:18:01:2d:81:3f:a0:51:3a:65:22:2e:ff:8b:1a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=tbtool

02/02/2023, 17:53
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 356KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 85KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 33KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:ddCertificate

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7aCertificate

e0:1c:66:af:58:3f:18:01:2d:81:3f:a0:51:3a:65:22:2e:ff:8b:1aSigner

Signature Validations

Verification

02/02/2023, 17:53 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 356KB - Virtual size: 992KB

.rdata Size: 85KB - Virtual size: 220KB

.data Size: 28KB - Virtual size: 260KB

.rsrc Size: 2KB - Virtual size: 96KB

.reloc Size: 33KB - Virtual size: 56KB

.aspack Size: 96KB - Virtual size: 96KB

.adata Size: - Virtual size: 4KB

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

77:d7:f5:94:a2:83:49:83:41:dc:af:56:dc:a1:50:7a
Certificate

e0:1c:66:af:58:3f:18:01:2d:81:3f:a0:51:3a:65:22:2e:ff:8b:1a
Signer

02/02/2023, 17:53
Valid: false

.text
Size: 356KB - Virtual size: 992KB

.rdata
Size: 85KB - Virtual size: 220KB

.data
Size: 28KB - Virtual size: 260KB

.rsrc
Size: 2KB - Virtual size: 96KB

.reloc
Size: 33KB - Virtual size: 56KB

.aspack
Size: 96KB - Virtual size: 96KB

.adata
Size: - Virtual size: 4KB