1592001806f15410e5d9f63bcbdefe44

Sharing

Copy URL Twitter E-mail

General

Target

1592001806f15410e5d9f63bcbdefe44
Size

1.8MB
MD5

1592001806f15410e5d9f63bcbdefe44
SHA1

50a9d3890920ea26367218f8086a8710b39e6066
SHA256

122467ff0f8de4e2f2cb09e7c48e4f3a4e90389b81c3dd31ced2fe7b1755d8bd
SHA512

639b40bd2e672ca32688c6b919a2ab63d53f69649ab0a2cfb82a9beb6a4389742226ba0712e4d64798e8b5dde6ad1b6f7915b69d7e011165ae5f17d36c1a003c
SSDEEP

49152:3rNW+z0GLt46aigj8MEtnWpKZgV/so7Kd2F7:3rNT9Lt4JdjfE9mavdo7

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/TakeColor/TakeColor.exe	aspack_v212_v242

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TakeColor/CoffeeCup Color Schemer/Schemer.exe
unpack001/TakeColor/TakeColor.exe
unpack001/TakeColor/快速配色工具/ColorKey.exe
unpack001/TakeColor/网页流行色选取器.exe

Files

1592001806f15410e5d9f63bcbdefe44
.rar
TakeColor/CoffeeCup Color Schemer/Schemer.dat
TakeColor/CoffeeCup Color Schemer/Schemer.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TakeColor/CoffeeCup Color Schemer/Schemes/Coffee.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/brown1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/brown2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/gray1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/gray2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green10.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green3.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green4.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green5.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green6.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green7.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green8.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/green9.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange3.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange4.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange5.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange6.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange7.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/orange8.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/pink1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/pink2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/purple1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/purple2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/red1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/red2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/red3.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/red4.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/red5.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/teal1.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/teal2.ccs
TakeColor/CoffeeCup Color Schemer/Schemes/teal3.ccs
TakeColor/CoffeeCup Color Schemer/forminfo.ini
TakeColor/CoffeeCup Color Schemer/htmlfile.dat
.html
TakeColor/FlashWebPage配色.swf
TakeColor/Flash调色板_colorPicker.swf
TakeColor/TakeColor.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 183KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TakeColor/readme.txt
TakeColor/快速配色工具/ColorKey.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.neolit
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TakeColor/快速配色工具/colorkey26075.htm
TakeColor/快速配色工具/colorkey27187.htm
TakeColor/快速配色工具/colorkey70603.htm
TakeColor/网页流行色选取器.exe
.exe windows:4 windows x86 arch:x86

44a957267ba01d464f4edb07b8be5087

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLateIdCall
__vbaLenBstr
__vbaStrVarMove
ord588
__vbaFreeVarList
__vbaVarIdiv
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
__vbaStrR8
EVENT_SINK_Release
ord600
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaI2Str
__vbaFPException
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarAdd
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TakeColor/跑调网页配色工具.CHM
.chm
TakeColor/配色大辞典.chm
.chm

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 2.4MB - Virtual size: 2.4MB

DATA Size: 38KB - Virtual size: 38KB

BSS Size: - Virtual size: 7KB

.idata Size: 13KB - Virtual size: 13KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 162KB - Virtual size: 161KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

Headers

File Characteristics

Sections

CODE Size: 183KB - Virtual size: 460KB

DATA Size: 2KB - Virtual size: 8KB

BSS Size: - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 36KB

.rsrc Size: 16KB - Virtual size: 60KB

.aspack Size: 14KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 276KB - Virtual size: 276KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 12KB - Virtual size: 17KB

.data1 Size: 4KB - Virtual size: 4KB

.rsrc Size: 40KB - Virtual size: 77KB

.neolit Size: 7KB - Virtual size: 28KB

44a957267ba01d464f4edb07b8be5087

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 204KB - Virtual size: 202KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 14KB

CODE
Size: 2.4MB - Virtual size: 2.4MB

DATA
Size: 38KB - Virtual size: 38KB

BSS
Size: - Virtual size: 7KB

.idata
Size: 13KB - Virtual size: 13KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 162KB - Virtual size: 161KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

CODE
Size: 183KB - Virtual size: 460KB

DATA
Size: 2KB - Virtual size: 8KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 36KB

.rsrc
Size: 16KB - Virtual size: 60KB

.aspack
Size: 14KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB

.text
Size: 276KB - Virtual size: 276KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 12KB - Virtual size: 17KB

.data1
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 40KB - Virtual size: 77KB

.neolit
Size: 7KB - Virtual size: 28KB

.text
Size: 204KB - Virtual size: 202KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 14KB