5daf4028ead7d16174efd9306b50749d

Sharing

Copy URL Twitter E-mail

General

Target

5daf4028ead7d16174efd9306b50749d
Size

1.2MB
MD5

5daf4028ead7d16174efd9306b50749d
SHA1

dee15a06ee6cf9d2755fa042be307abbd49a1399
SHA256

575b61509b8d9ebc7199d036e727bda6b557b9a1a9e6953fe714f030d5109b54
SHA512

cf75205e49ed39ae98132ff46ae2fbd7b892a8e5f73d234d87b983d65bdbcec8d599965d7ccd977403b05be7fe285a9a4ca969ef2a0e57f6aac845c47b424f46
SSDEEP

24576:bhWIWaka1oSC8jqMyNTIpdtkItv6bMj5RnB8mfbkpYvxzUQJF8gnkKxr99PTD4mw:cIiSCEq1bMj5RnZ4oxzUQjfndL9344g

Score

7^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 3 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/Bosch ESI Keygen 2Q.2012/Bosch ESI Keygen 2Q.2012.exe	aspack_v212_v242
static1/unpack001/Bosch ESI Keygen 2Q.2012/Patch 2Q.2012/Esi2.exe	aspack_v212_v242
static1/unpack001/Bosch ESI Keygen 2Q.2012/bosch.dll	aspack_v212_v242

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Bosch ESI Keygen 2Q.2012/Bosch ESI Keygen 2Q.2012.exe	upx
static1/unpack001/Bosch ESI Keygen 2Q.2012/Patch 2Q.2012/Esi2.exe	upx
static1/unpack001/Bosch ESI Keygen 2Q.2012/bosch.dll	upx

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bosch ESI Keygen 2Q.2012/Bosch ESI Keygen 2Q.2012.exe
unpack001/Bosch ESI Keygen 2Q.2012/Patch 2Q.2012/Esi2.exe
unpack001/Bosch ESI Keygen 2Q.2012/bosch.dll

Files

5daf4028ead7d16174efd9306b50749d
.rar
Bosch ESI Keygen 2Q.2012/Bosch ESI Keygen 2Q.2012.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Dee
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bosch ESI Keygen 2Q.2012/Patch 2Q.2012/Esi2.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 827KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bosch ESI Keygen 2Q.2012/Patch 2Q.2012/ReadMe!.txt
Bosch ESI Keygen 2Q.2012/bosch.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

bosch

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 71KB - Virtual size: 148KB

.rdata Size: 11KB - Virtual size: 36KB

.data Size: 3KB - Virtual size: 24KB

.rsrc Size: 6KB - Virtual size: 16KB

.Dee Size: 512B - Virtual size: 4KB

.UPX Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 827KB - Virtual size: 2.8MB

.rdata Size: 116KB - Virtual size: 512KB

.data Size: 44KB - Virtual size: 200KB

.rsrc Size: 172KB - Virtual size: 464KB

.UPX Size: 16KB - Virtual size: 20KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.data Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.UPX Size: 4KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 71KB - Virtual size: 148KB

.rdata
Size: 11KB - Virtual size: 36KB

.data
Size: 3KB - Virtual size: 24KB

.rsrc
Size: 6KB - Virtual size: 16KB

.Dee
Size: 512B - Virtual size: 4KB

.UPX
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 827KB - Virtual size: 2.8MB

.rdata
Size: 116KB - Virtual size: 512KB

.data
Size: 44KB - Virtual size: 200KB

.rsrc
Size: 172KB - Virtual size: 464KB

.UPX
Size: 16KB - Virtual size: 20KB

.adata
Size: - Virtual size: 4KB

.text
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.data
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB

.UPX
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB