53d57c2f41db3262974d1659a8b04278bc1217bef82c8db90fe938fb19aa6bbf

Sharing

Copy URL Twitter E-mail

General

Target

53d57c2f41db3262974d1659a8b04278bc1217bef82c8db90fe938fb19aa6bbf
Size

403KB
MD5

aaaf97fab5c127baf4c0002d3b70d7ac
SHA1

9187757f7d35f083a6b147d66183617588c5501c
SHA256

53d57c2f41db3262974d1659a8b04278bc1217bef82c8db90fe938fb19aa6bbf
SHA512

c1110bc871416d3ea4623500998ec2d9a056832aab2cd5b7f56a633692b5fc6c356b4716ee23aa0433fea9e849cda782277c2538b0bd546e3bc6c5367961f187
SSDEEP

6144:pNW0kTVy2kyi7Q0T5NYy0mCZGnXDXqB850F/5D9wMb7jPHT9wSZTLfpzKPlBlM:puyjyi00zYrTZGXq85s5xpbHfhB9pOlM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

53d57c2f41db3262974d1659a8b04278bc1217bef82c8db90fe938fb19aa6bbf
.dll windows x86

Code Sign

06:0d:2b:0f:54:4d:07:30
Certificate

Issuer

CN=TrustAsia Code Signing CA G2,O=TrustAsia Technologies\, Inc.,C=CN

Not Before

01/02/2020, 10:37

Not After

01/02/2022, 10:37

Subject

CN=亚洲诚信代码签名测试证书,O=亚数信息科技（上海）有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:3a:e6:08:b5:37:e8:9d
Certificate

Issuer

CN=TrustAsia SHA2 Code Signing CA G2,O=TrustAsia Technologies\, Inc.,C=CN

Not Before

01/02/2020, 10:40

Not After

01/02/2022, 10:40

Subject

CN=亚洲诚信代码签名测试证书SHA2,O=亚数信息科技（上海）有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:76:cc:5c:77:d3:71:23:0b:44:a0:61:2f:b3:4c:fc:ab:77:8f:f9:74:27:6b:1a:98:b4:86:3d:04:4f:50:16
Signer

Actual PE Digest

61:76:cc:5c:77:d3:71:23:0b:44:a0:61:2f:b3:4c:fc:ab:77:8f:f9:74:27:6b:1a:98:b4:86:3d:04:4f:50:16

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信代码签名测试证书SHA2,O=亚数信息科技（上海）有限公司,L=上海市,ST=上海市,C=CN

23/07/2021, 03:16
Valid: false

a9:d3:1a:20:6f:dd:c4:97:2f:2b:65:96:59:d5:6a:7f:62:b9:8a:5f
Signer

Actual PE Digest

a9:d3:1a:20:6f:dd:c4:97:2f:2b:65:96:59:d5:6a:7f:62:b9:8a:5f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信代码签名测试证书,O=亚数信息科技（上海）有限公司,L=上海市,ST=上海市,C=CN

23/07/2021, 03:16
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_��ӳ��

Sections

.text
Size: 245KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

06:0d:2b:0f:54:4d:07:30Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

4a:3a:e6:08:b5:37:e8:9dCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

61:76:cc:5c:77:d3:71:23:0b:44:a0:61:2f:b3:4c:fc:ab:77:8f:f9:74:27:6b:1a:98:b4:86:3d:04:4f:50:16Signer

Signature Validations

Verification

23/07/2021, 03:16 Valid: false

a9:d3:1a:20:6f:dd:c4:97:2f:2b:65:96:59:d5:6a:7f:62:b9:8a:5fSigner

Signature Validations

Verification

23/07/2021, 03:16 Valid: false

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 245KB - Virtual size: 524KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 22KB - Virtual size: 192KB

.rsrc Size: 8KB - Virtual size: 24KB

.reloc Size: 19KB - Virtual size: 80KB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

06:0d:2b:0f:54:4d:07:30
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

4a:3a:e6:08:b5:37:e8:9d
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

61:76:cc:5c:77:d3:71:23:0b:44:a0:61:2f:b3:4c:fc:ab:77:8f:f9:74:27:6b:1a:98:b4:86:3d:04:4f:50:16
Signer

23/07/2021, 03:16
Valid: false

a9:d3:1a:20:6f:dd:c4:97:2f:2b:65:96:59:d5:6a:7f:62:b9:8a:5f
Signer

23/07/2021, 03:16
Valid: false

.text
Size: 245KB - Virtual size: 524KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 22KB - Virtual size: 192KB

.rsrc
Size: 8KB - Virtual size: 24KB

.reloc
Size: 19KB - Virtual size: 80KB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB