ef8cf00fd2c5320a8d68e2800f05c441df0d39ab5b324d06c3b4a85fb4902dc3[.]exe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

ef8cf00fd2c5320a8d68e2800f05c441df0d39ab5b324d06c3b4a85fb4902dc3.exe.zip
Size

13.1MB
MD5

7157bbf8afe6876559959caa30216a6b
SHA1

2430bf71aa78c5678ba7240798c7accb335eec69
SHA256

30994309b7c7896f9e3a0572ad4fe5fb982ff1ca8a5b95075904109dcd4eb5a4
SHA512

3813f3e8d8c9f7f3017d6b29125c23aa5a0143725a430134c7942b554e4a322569fcbf8fc00ae4b4749aa678610a0655a6f706f6e663e46a9ed15b9e12053db9
SSDEEP

393216:HUoGBBXGNap7M39jKYzyZbSsAWj92LBw+9fp:HBGnXaapA3JyZWsAYm20fp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/ef8cf00fd2c5320a8d68e2800f05c441df0d39ab5b324d06c3b4a85fb4902dc3.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ef8cf00fd2c5320a8d68e2800f05c441df0d39ab5b324d06c3b4a85fb4902dc3.exe

Files

ef8cf00fd2c5320a8d68e2800f05c441df0d39ab5b324d06c3b4a85fb4902dc3.exe.zip
.zip

Password: infected
ef8cf00fd2c5320a8d68e2800f05c441df0d39ab5b324d06c3b4a85fb4902dc3.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 8.4MB - Virtual size: 31.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 56KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 111KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 49.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

File Characteristics

Sections

.text Size: 8.4MB - Virtual size: 31.0MB

.itext Size: 56KB - Virtual size: 244KB

.data Size: 111KB - Virtual size: 396KB

.bss Size: - Virtual size: 304KB

.idata Size: 12KB - Virtual size: 48KB

.didata Size: 512B - Virtual size: 4KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 2.0MB

.rsrc Size: 4.1MB - Virtual size: 49.0MB

.aspack Size: 784KB - Virtual size: 784KB

.adata Size: - Virtual size: 4KB

.text
Size: 8.4MB - Virtual size: 31.0MB

.itext
Size: 56KB - Virtual size: 244KB

.data
Size: 111KB - Virtual size: 396KB

.bss
Size: - Virtual size: 304KB

.idata
Size: 12KB - Virtual size: 48KB

.didata
Size: 512B - Virtual size: 4KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 2.0MB

.rsrc
Size: 4.1MB - Virtual size: 49.0MB

.aspack
Size: 784KB - Virtual size: 784KB

.adata
Size: - Virtual size: 4KB