753c7b49e666b5f59de148e9a796f57b

Sharing

Copy URL Twitter E-mail

General

Target

753c7b49e666b5f59de148e9a796f57b
Size

299KB
MD5

753c7b49e666b5f59de148e9a796f57b
SHA1

2f9072ef35776b0a98c624fb2406f8f7b7943df8
SHA256

e18e0e86b41c57e0c159e5913b11c4dc05e8c9b53aebd68b14606b8eb683dd8e
SHA512

5a9d8a09605031f224ac1dd974199abbd0ba7ea089d09f298a43fbb549ea32d6a82f8203db8b76a411a605de0169c91676636e50fda11e0747eb59dde7dfe5b3
SSDEEP

6144:4lrV0Ce5tser8WDnBYceKR3Egrw+AjOk4DWzWYD4KJzEl8fERm/BXQh:4luCCWKh0jCQ7JmazXQh

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
753c7b49e666b5f59de148e9a796f57b

Files

753c7b49e666b5f59de148e9a796f57b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CreateMultipageJPM
GetPlugInInfo
JB2_Compress_End
JB2_Compress_Get_Property
JB2_Compress_Line
JB2_Compress_Set_License
JB2_Compress_Set_Property
JB2_Compress_Start
JB2_Document_End
JB2_Document_Export_Document
JB2_Document_Get_Property
JB2_Document_Set_License
JB2_Document_Set_Page
JB2_Document_Start
JP2_Compress_End
JP2_Compress_GetProp
JP2_Compress_Image
JP2_Compress_SetChannelDefs
JP2_Compress_SetFeature
JP2_Compress_SetICC
JP2_Compress_SetIPTC_Data
JP2_Compress_SetIP_Data
JP2_Compress_SetLAB
JP2_Compress_SetLicense
JP2_Compress_SetPalette
JP2_Compress_SetPrecinct
JP2_Compress_SetProp
JP2_Compress_SetROI
JP2_Compress_SetROI_Enhance
JP2_Compress_SetResolution
JP2_Compress_SetUUID_Data
JP2_Compress_SetUUID_Info
JP2_Compress_SetXML_Data
JP2_Compress_Start
JP2_Compress_UseExternalCache
JP2_Decompress_ContainsFeature
JP2_Decompress_End
JP2_Decompress_GetCOM_Data
JP2_Decompress_GetCOM_Num
JP2_Decompress_GetChannelDefs
JP2_Decompress_GetColorSpec
JP2_Decompress_GetICC
JP2_Decompress_GetIPTC_Data
JP2_Decompress_GetIPTC_Num
JP2_Decompress_GetIP_Data
JP2_Decompress_GetIP_Num
JP2_Decompress_GetLAB
JP2_Decompress_GetPalette
JP2_Decompress_GetPrecinct
JP2_Decompress_GetProp
JP2_Decompress_GetResolution
JP2_Decompress_GetUUID_Data
JP2_Decompress_GetUUID_Id
JP2_Decompress_GetUUID_Info_Data
JP2_Decompress_GetUUID_Info_Num
JP2_Decompress_GetUUID_Num
JP2_Decompress_GetXML_Data
JP2_Decompress_GetXML_Num
JP2_Decompress_Image
JP2_Decompress_SetColorSpec
JP2_Decompress_SetLicense
JP2_Decompress_SetProp
JP2_Decompress_Start
JP2_General_CheckICC
JPM_Compress_End
JPM_Compress_Get_Property
JPM_Compress_Page
JPM_Compress_Set_ICC
JPM_Compress_Set_License
JPM_Compress_Set_Property
JPM_Compress_Set_Resolution
JPM_Compress_Start
JPM_Compress_Use_External_Cache
JPM_Document_Add_External_Page_As_Copy
JPM_Document_Add_External_Page_As_Reference
JPM_Document_Decompress_Page
JPM_Document_Decompress_Page_Thumbnail
JPM_Document_Decompress_Preview
JPM_Document_Delete_Page
JPM_Document_Delete_Preview
JPM_Document_Delete_Thumbnail
JPM_Document_End
JPM_Document_Export_Document
JPM_Document_Export_Page
JPM_Document_Get_Layout_Property
JPM_Document_Get_Page_Property
JPM_Document_Get_Page_Resolution
JPM_Document_Get_Preview_Property
JPM_Document_Get_Preview_Resolution
JPM_Document_Get_Property
JPM_Document_Meta_Data_Add_IPR
JPM_Document_Meta_Data_Add_IPTC
JPM_Document_Meta_Data_Add_Label
JPM_Document_Meta_Data_Add_UUID
JPM_Document_Meta_Data_Add_XML
JPM_Document_Meta_Data_Delete
JPM_Document_Meta_Data_Get
JPM_Document_Meta_Data_Get_Length
JPM_Document_Meta_Data_Get_UUID
JPM_Document_Rotate_Page
JPM_Document_Set_Layout_Render_Mode
JPM_Document_Set_License
JPM_Document_Set_Page
JPM_Document_Set_Page_To_Next
JPM_Document_Set_Page_To_Previous
JPM_Document_Set_Property
JPM_Document_Start
JPM_Document_Use_External_Cache
JPM_PDF_Compress_Page
JPM_PDF_Compress_Set_License
JPM_PDF_Document_Add_Page
JPM_PDF_Document_Delete_Page
JPM_PDF_Document_End
JPM_PDF_Document_Export_Document
JPM_PDF_Document_Get_Property
JPM_PDF_Document_Rotate_Page
JPM_PDF_Document_Set_Page
JPM_PDF_Document_Set_Page_Property
JPM_PDF_Document_Set_Property
JPM_PDF_License_Create
JPM_PDF_License_Delete
JPM_PDF_License_Get_Property
JPM_PDF_License_Import
JPM_PDF_License_Request
ReadJPM
SaveJPM
ScanJPM
ShowPlugInSaveOptions

Sections

.text
Size: 227KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 227KB - Virtual size: 560KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 32KB - Virtual size: 432KB

.rsrc Size: 3KB - Virtual size: 20KB

.reloc Size: 5KB - Virtual size: 12KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 227KB - Virtual size: 560KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 32KB - Virtual size: 432KB

.rsrc
Size: 3KB - Virtual size: 20KB

.reloc
Size: 5KB - Virtual size: 12KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB