d908821e64914394a39ef40d5b0099a335860f2ac26dbcf2ba2854107818c02c

Sharing

Copy URL Twitter E-mail

General

Target

d908821e64914394a39ef40d5b0099a335860f2ac26dbcf2ba2854107818c02c
Size

120KB
MD5

52ec3c4e15cb7c3febd95439d26181c9
SHA1

f1268d687acb8290f199f7d2caec74ebf0828715
SHA256

d908821e64914394a39ef40d5b0099a335860f2ac26dbcf2ba2854107818c02c
SHA512

618e6b885569af958c33efb6a216a969ea62be7724bbf4cf8e4371a7c2c200711299786bbdd70bf83237b6869c277bd4fb1c7ecfcf84409be82df8ac6094a5e5
SSDEEP

3072:smpoBwazcpih70NKZtlv4Yzzf3gDpDJzX8p8AtMPe4nZ:HpoBwa9dlTlv4AQ1DFi8BJZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

d908821e64914394a39ef40d5b0099a335860f2ac26dbcf2ba2854107818c02c
.dll windows x86

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:ec:41:fa:30:46:c0:61:ab:b5:17:9b:33:e9:63:bc
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

26/02/2021, 00:00

Not After

26/02/2024, 23:59

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=江下信息科技（惠州）有限公司,O=江下信息科技（惠州）有限公司,POSTALCODE=516006,STREET=仲恺高新区仲恺大道448号同方信息港大厦21层自编37号（仅限办公）,L=惠州市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6b:ec:85:6e:ff:78:46:d0:61:21:a2:1b:08:58:76:0e:26:4b:3c:df
Signer

Actual PE Digest

6b:ec:85:6e:ff:78:46:d0:61:21:a2:1b:08:58:76:0e:26:4b:3c:df

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GMBSImpl
GetMiniBrowserServer

Sections

.text
Size: 73KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

b2:ec:41:fa:30:46:c0:61:ab:b5:17:9b:33:e9:63:bcCertificate

Extended Key Usages

Key Usages

6b:ec:85:6e:ff:78:46:d0:61:21:a2:1b:08:58:76:0e:26:4b:3c:dfSigner

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 184KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 6KB - Virtual size: 128KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 7KB - Virtual size: 16KB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

b2:ec:41:fa:30:46:c0:61:ab:b5:17:9b:33:e9:63:bc
Certificate

6b:ec:85:6e:ff:78:46:d0:61:21:a2:1b:08:58:76:0e:26:4b:3c:df
Signer

.text
Size: 73KB - Virtual size: 184KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 6KB - Virtual size: 128KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 7KB - Virtual size: 16KB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB