3bcc92246f6a12eede4b4e6348c51d5e58cc28cadac2baf157cc45c29287e669

Sharing

Copy URL

Twitter E-mail

General

Target

3bcc92246f6a12eede4b4e6348c51d5e58cc28cadac2baf157cc45c29287e669
Size

218KB
MD5

7e094efbf87407b2e0312fbf136782df
SHA1

ce5b128f47d4b25d532b3a30a50e89e42fb4fce5
SHA256

3bcc92246f6a12eede4b4e6348c51d5e58cc28cadac2baf157cc45c29287e669
SHA512

fd20622afa870274d5abf695e769473b8ef6c57841ac69d9f14d3fb46410fbd2e9cedc1ba213983f4bdcb0b20efaf6aa053c96347a7370535365ad4653434386
SSDEEP

6144:np9vn1rj5KHf4BSs81bk62jTuiUwDlVsmRcaZpB:n9rjOk62jTDUwxVsmWaN

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

resource	yara_rule
sample	aspack_v212_v242

Files

3bcc92246f6a12eede4b4e6348c51d5e58cc28cadac2baf157cc45c29287e669
.dll regsvr32 windows x86

Code Sign

58:64:7e:2b:ee:f4:82:6b:bd:3e:a3:a0:23:b9:49:98
Certificate

Issuer

CN=Neusoft

Not Before

24-03-2015 07:40

Not After

31-12-2039 23:59

Subject

CN=Neusoft

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 171KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

58:64:7e:2b:ee:f4:82:6b:bd:3e:a3:a0:23:b9:49:98Certificate

Signer

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 171KB - Virtual size: 416KB

DATA Size: 2KB - Virtual size: 8KB

BSS Size: - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 12KB

.edata Size: 512B - Virtual size: 4KB

.reloc Size: 17KB - Virtual size: 32KB

.rsrc Size: 15KB - Virtual size: 32KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

58:64:7e:2b:ee:f4:82:6b:bd:3e:a3:a0:23:b9:49:98
Certificate

CODE
Size: 171KB - Virtual size: 416KB

DATA
Size: 2KB - Virtual size: 8KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 12KB

.edata
Size: 512B - Virtual size: 4KB

.reloc
Size: 17KB - Virtual size: 32KB

.rsrc
Size: 15KB - Virtual size: 32KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB