816df5a468f7b25baf00e481130317c400578bccb4ac03997fc278935cac8bda

Sharing

Copy URL

Twitter E-mail

General

Target

816df5a468f7b25baf00e481130317c400578bccb4ac03997fc278935cac8bda
Size

1.4MB
MD5

c5361a09d5f44161ed5dc0cb8e5a7ae5
SHA1

980d6bb0d8b50ccb265c66c83aadbf115daf89ca
SHA256

816df5a468f7b25baf00e481130317c400578bccb4ac03997fc278935cac8bda
SHA512

e691ac1a123689e61faf3c6c5e31c56d556c30bb18e21d565b03100f9700ccd8c4ec567a2af279c9d6b7eafd137841a5c7b2b6f90f84a5edc27b2f3772dc19c4
SSDEEP

24576:4106qZfmpVHSFhc+t74kn7eNL/Q4c47X87kQ9DjzKC7o9SKcq9Facki/W:TZfYpSFhD7r6NLd/7X8oaP14Fac

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
816df5a468f7b25baf00e481130317c400578bccb4ac03997fc278935cac8bda

Files

816df5a468f7b25baf00e481130317c400578bccb4ac03997fc278935cac8bda
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 1.2MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 3.9MB

.itext Size: 6KB - Virtual size: 12KB

.data Size: 53KB - Virtual size: 116KB

.bss Size: - Virtual size: 27KB

.idata Size: 5KB - Virtual size: 20KB

.didata Size: 1KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.tls Size: - Virtual size: 84B

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 340KB

.rsrc Size: 89KB - Virtual size: 340KB

.aspack Size: 29KB - Virtual size: 32KB

.adata Size: - Virtual size: 4KB

.text
Size: 1.2MB - Virtual size: 3.9MB

.itext
Size: 6KB - Virtual size: 12KB

.data
Size: 53KB - Virtual size: 116KB

.bss
Size: - Virtual size: 27KB

.idata
Size: 5KB - Virtual size: 20KB

.didata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.tls
Size: - Virtual size: 84B

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 340KB

.rsrc
Size: 89KB - Virtual size: 340KB

.aspack
Size: 29KB - Virtual size: 32KB

.adata
Size: - Virtual size: 4KB