MediInfoPlat[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

MediInfoPlat.exe
Size

24.7MB
MD5

5c8d63663329a1fc8cb07a9ce79ac895
SHA1

036b867e49a9010f8c1310dde0a82ee24740f948
SHA256

00cb58491e04772fcc461b19889f7349cb5b8a23a53d35605f203142229b431e
SHA512

900c28b78d00a33ad7d4b51b7fe65c447fb0daa9b894d5c118493fdff8287a0b59bb8046d48ecfeead66fb58be6998954638e6d5c12d17c9057eafa6ed7f6379
SSDEEP

786432:FUOg1K700TdlO/BOk2Ti7BzWgswXRk9a1g:FUEdlO/kTi7k5whD1g

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

MediInfoPlat.exe

resource	yara_rule
sample	aspack_v212_v242

resource
MediInfoPlat.exe

Files

MediInfoPlat.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 4.6MB - Virtual size: 17.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 40KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 118KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 558KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 579KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.2MB - Virtual size: 36.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 4.6MB - Virtual size: 17.1MB

.itext Size: 40KB - Virtual size: 176KB

.data Size: 118KB - Virtual size: 248KB

.bss Size: - Virtual size: 558KB

.idata Size: 6KB - Virtual size: 20KB

.didata Size: 2KB - Virtual size: 12KB

.edata Size: 512B - Virtual size: 4KB

.tls Size: - Virtual size: 96B

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: 579KB - Virtual size: 1.4MB

.rsrc Size: 19.2MB - Virtual size: 36.5MB

.aspack Size: 141KB - Virtual size: 144KB

.adata Size: - Virtual size: 4KB

.text
Size: 4.6MB - Virtual size: 17.1MB

.itext
Size: 40KB - Virtual size: 176KB

.data
Size: 118KB - Virtual size: 248KB

.bss
Size: - Virtual size: 558KB

.idata
Size: 6KB - Virtual size: 20KB

.didata
Size: 2KB - Virtual size: 12KB

.edata
Size: 512B - Virtual size: 4KB

.tls
Size: - Virtual size: 96B

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: 579KB - Virtual size: 1.4MB

.rsrc
Size: 19.2MB - Virtual size: 36.5MB

.aspack
Size: 141KB - Virtual size: 144KB

.adata
Size: - Virtual size: 4KB