7d12766f6231cbacfc83dafa0d462cf586ec401e1df01443a383e05722681deb[.]exe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

7d12766f6231cbacfc83dafa0d462cf586ec401e1df01443a383e05722681deb.exe.zip
Size

224KB
MD5

7dbd6af9c95e2bcf5804008f9b5ff518
SHA1

a9d03f3678436b7a1d481b1918e58a2b70757f6f
SHA256

c38b80fd7462161f8f9f26bb902162113475169f54398255b8d30413b5d39742
SHA512

d8e320bd249f190416e02e40731546274c1a950bdf6db0fdb01e7b544448096794517931497b1af78bc339d16b1d68cc5ed492a463c201fa895146c576752405
SSDEEP

3072://k2cBTCNCfd2rYNMM5aiQe6CQssfqYAo1mCKS7Ju/WqNa3/3TiM1d06a1K8XPAN:3k2cENfsNadCSqtoXZ7I/S/dd0Ko4tv

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/7d12766f6231cbacfc83dafa0d462cf586ec401e1df01443a383e05722681deb.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7d12766f6231cbacfc83dafa0d462cf586ec401e1df01443a383e05722681deb.exe

Files

7d12766f6231cbacfc83dafa0d462cf586ec401e1df01443a383e05722681deb.exe.zip
.zip

Password: infected
7d12766f6231cbacfc83dafa0d462cf586ec401e1df01443a383e05722681deb.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 200KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

File Characteristics

Sections

.text Size: 200KB - Virtual size: 464KB

.itext Size: 2KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 12KB

.bss Size: - Virtual size: 16KB

.idata Size: 3KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 28KB

.rsrc Size: 13KB - Virtual size: 48KB

.aspack Size: 9KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

.text
Size: 200KB - Virtual size: 464KB

.itext
Size: 2KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 12KB

.bss
Size: - Virtual size: 16KB

.idata
Size: 3KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 28KB

.rsrc
Size: 13KB - Virtual size: 48KB

.aspack
Size: 9KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB