1342f39f5fed5fc2492775f13cb0e714

Sharing

Copy URL Twitter E-mail

General

Target

1342f39f5fed5fc2492775f13cb0e714
Size

871KB
MD5

1342f39f5fed5fc2492775f13cb0e714
SHA1

e8205237edd9d946662fb0bf89812edb52cc9719
SHA256

bdc29dae47a5a1660efb2af51082f50fc4ead550d22d10011a458f336dfc5408
SHA512

17a519f0b022350137ad6a04c398e1da99edbd2da8fa79dd61ce6eae9f7084e62ee0ef48745a286c6795a61ae88ac6952c9f31bf82ea923f125fdea2ab92e8d4
SSDEEP

12288:VT3jReJTXmvcDjGkcY/BeOyGE4CGuP0OsdzofSE+7xw6DofaDylwQj7xJogWNioG:JTg4YVP/gHG1CV0YSDFwYofxF+QoG

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1342f39f5fed5fc2492775f13cb0e714

Files

1342f39f5fed5fc2492775f13cb0e714
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Dialogsplash@Finalize
@@Dialogsplash@Initialize
@@Formmain@Finalize
@@Formmain@Initialize
@System@TObject@ClassNameIs$qqrx17System@AnsiString
_DlgAbout
_DlgBuilder
_DlgFileName
_DlgOptions
_DlgProperties
_DlgSearchHost
_DlgSplash
_DlgUpdateDomain
_FormAzrael
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 313KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 29KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 494KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 313KB - Virtual size: 856KB

.data Size: 29KB - Virtual size: 144KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 16KB

.edata Size: 1024B - Virtual size: 4KB

.rsrc Size: 494KB - Virtual size: 1.2MB

.reloc Size: - Virtual size: 52KB

.aspack Size: 27KB - Virtual size: 28KB

.adata Size: - Virtual size: 4KB

.text
Size: 313KB - Virtual size: 856KB

.data
Size: 29KB - Virtual size: 144KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 16KB

.edata
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 494KB - Virtual size: 1.2MB

.reloc
Size: - Virtual size: 52KB

.aspack
Size: 27KB - Virtual size: 28KB

.adata
Size: - Virtual size: 4KB