d423511e89b61d8e676bf20a4fb3cffbfc2fe10ade39ae9722241b6e54f26320

Sharing

Copy URL

Twitter E-mail

General

Target

d423511e89b61d8e676bf20a4fb3cffbfc2fe10ade39ae9722241b6e54f26320
Size

573KB
MD5

77dc0673d70538fd826c734bc70c225b
SHA1

d5d519a6906add3da43cc98a42ab667d79d74672
SHA256

d423511e89b61d8e676bf20a4fb3cffbfc2fe10ade39ae9722241b6e54f26320
SHA512

5c59dd3b49049cc47241a48e28e09367fc5d8d79a3ce5a8b7535bd6a2062cd25baca5cd0ebd3679afb1319a9358c919e8e2f91b8675753f01a2e46f00ca16fe8
SSDEEP

12288:r4ZkOSYls8TsZdyWSsZBXZKPIEbdTfpC/L7XX3zlDB2lEUQ:r4/krXpic/LzX3zJAlE9

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

resource	yara_rule
sample	aspack_v212_v242

Files

d423511e89b61d8e676bf20a4fb3cffbfc2fe10ade39ae9722241b6e54f26320
.exe windows x86

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

Issuer

CN=Sunlight Studio

Not Before

18-11-2019 19:37

Not After

31-12-2039 23:59

Subject

CN=tbtool

b9:79:51:0b:20:fd:cf:00:14:50:4a:3e:57:27:a7:39:9f:63:b5:d2
Signer

Actual PE Digest

b9:79:51:0b:20:fd:cf:00:14:50:4a:3e:57:27:a7:39:9f:63:b5:d2

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=tbtool

24-02-2023 15:17
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 325KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 75KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 27KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:ddCertificate

b9:79:51:0b:20:fd:cf:00:14:50:4a:3e:57:27:a7:39:9f:63:b5:d2Signer

Signature Validations

Verification

24-02-2023 15:17 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 325KB - Virtual size: 780KB

.rdata Size: 75KB - Virtual size: 196KB

.data Size: 33KB - Virtual size: 312KB

.rsrc Size: 13KB - Virtual size: 120KB

.reloc Size: 27KB - Virtual size: 52KB

.aspack Size: 97KB - Virtual size: 100KB

.adata Size: - Virtual size: 4KB

5f:50:89:ad:d7:38:b8:86:4b:66:6e:4a:95:f0:52:dd
Certificate

b9:79:51:0b:20:fd:cf:00:14:50:4a:3e:57:27:a7:39:9f:63:b5:d2
Signer

24-02-2023 15:17
Valid: false

.text
Size: 325KB - Virtual size: 780KB

.rdata
Size: 75KB - Virtual size: 196KB

.data
Size: 33KB - Virtual size: 312KB

.rsrc
Size: 13KB - Virtual size: 120KB

.reloc
Size: 27KB - Virtual size: 52KB

.aspack
Size: 97KB - Virtual size: 100KB

.adata
Size: - Virtual size: 4KB