50223fcfb75e464de16c2ff5322ff33a

Sharing

Copy URL

Twitter E-mail

General

Target

50223fcfb75e464de16c2ff5322ff33a
Size

239KB
MD5

50223fcfb75e464de16c2ff5322ff33a
SHA1

e536ee8115e0baded1d4cd0acde90423e35fd292
SHA256

12a00c621d9103ad59cd6b856da78447e5276b4ea33acff0e1d5704959141513
SHA512

a23102e69cb1e45e23ba0ab1359f721ac95ec45f4c1332517e9ce7aa15689d6a9c6b85453e9ff14118d02f876c0388ac8900b205c36d5bf1fb3fd818e493408f
SSDEEP

6144:Jm8qeNWVQUiMlFohglWXS3Iqf2WJiHeHr88:9qQW8MlFGEV3IqfFi+Hw8

Score

7^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

50223fcfb75e464de16c2ff5322ff33a
.dll windows:4 windows x86 arch:x86

Code Sign

b8:19:1e:63:ee:9e:75:0b
Certificate

Issuer

CN=上海挑战软件技术有限公司,OU=上海挑战软件技术有限公司,O=上海挑战软件技术有限公司,L=上海市,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c166368616c6c736f6674406368616c6c736f66742e636e

Not Before

22/05/2008, 07:13

Not After

12/12/2015, 04:12

Subject

CN=挑战软件代码签名证书,O=上海挑战软件技术有限公司,L=上海市,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c166368616c6c736f6674406368616c6c736f66742e636e

Extended Key Usages

ExtKeyUsageCodeSigning

01:00
Certificate

Issuer

CN=上海挑战软件CA认证中心,OU=上海挑战软件CA认证中心,O=上海挑战软件CA认证中心,L=上海市,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c166368616c6c736f6674406368616c6c736f66742e636e

Not Before

12/12/2005, 04:12

Not After

12/12/2015, 04:12

Subject

CN=上海挑战软件技术有限公司,OU=上海挑战软件技术有限公司,O=上海挑战软件技术有限公司,L=上海市,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c166368616c6c736f6674406368616c6c736f66742e636e

71:57:3b:05:d0:e3:d2:f6:54:aa:16:04:b1:69:64:10:5b:42:cb:aa
Signer

Actual PE Digest

71:57:3b:05:d0:e3:d2:f6:54:aa:16:04:b1:69:64:10:5b:42:cb:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

UPX0
Size: - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 228KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

b8:19:1e:63:ee:9e:75:0bCertificate

Extended Key Usages

01:00Certificate

71:57:3b:05:d0:e3:d2:f6:54:aa:16:04:b1:69:64:10:5b:42:cb:aaSigner

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 400KB

UPX1 Size: 228KB - Virtual size: 236KB

.rsrc Size: 2KB - Virtual size: 4KB

.aspack Size: 4KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

b8:19:1e:63:ee:9e:75:0b
Certificate

01:00
Certificate

71:57:3b:05:d0:e3:d2:f6:54:aa:16:04:b1:69:64:10:5b:42:cb:aa
Signer

UPX0
Size: - Virtual size: 400KB

UPX1
Size: 228KB - Virtual size: 236KB

.rsrc
Size: 2KB - Virtual size: 4KB

.aspack
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB