4fda63c7d037bd27e4fe0852bf5cf5c2 | Triage

Sharing

General

Target

4fda63c7d037bd27e4fe0852bf5cf5c2
Size

16.1MB
MD5

4fda63c7d037bd27e4fe0852bf5cf5c2
SHA1

d111531cdc10c68d8d02050f9fe54da27c3f616b
SHA256

b6cf22af6fe5ec16da3b598e57cadbc9a1d00e850b58f3442f1633ad08a4f263
SHA512

58c423b6d5ddd7a401615654128caa4ebcfee6dbe5c9b7ffab9c90e7ef035a674153a072021096d3f93157a7729969b435ad258dc0dd21b2735d597294e9eca1
SSDEEP

393216:cOOIDUiebIdhtr+6rFdO2hCLXqrs/jzvSH7O/KXHkZistQhOo:aEUi0I5bHuvvS4KXHkZE1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/HCEOA.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HCEOA.exe

Files

4fda63c7d037bd27e4fe0852bf5cf5c2
.rar
HCEOA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url