502473c6edd7247bb91975bf2ed3ba78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

502473c6edd7247bb91975bf2ed3ba78
Size

443KB
MD5

502473c6edd7247bb91975bf2ed3ba78
SHA1

a4cc8c877078b61d9d5604308ddddb1f0f090a26
SHA256

e50aabf45d1e7a882ed6439fbd38c6bfaf48438c1e003e8e387092da35c73433
SHA512

73ddde21de367ecf584789c28584d4bfdf2ec8ab88352b76d182d37463053fec789e5ce7aabe365d45cafd8196a0020edcf2d8955bc0280e8547d93149e99bf2
SSDEEP

12288:CPJGWWSU1rnJy237m1xziqO1ppdW2fb+T:qJUzxnMXbe7pDW2fb+T

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/HideDir隐藏目录.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HideDir隐藏目录.exe

Files

502473c6edd7247bb91975bf2ed3ba78
.rar
HideDir隐藏目录.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 62KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Readme.txt
hidedir.gif
.gif
下载说明.htm
.html .js polyglot