8961a2264607f44e4c6dc801674e1922 | Triage

Sharing

General

Target

8961a2264607f44e4c6dc801674e1922
Size

93KB
MD5

8961a2264607f44e4c6dc801674e1922
SHA1

41f840a52fab0be1b35c424a0d2f2e8f2ee25ca5
SHA256

069eb7691784b753ab312e610a785ccfddc61cb6b5327e4338d1159b1960cbaa
SHA512

70d37bc8b40d98a325bf6ce23a3faf5177fa47b0ea5a11067598de5ae5678af9b55d4b0d4680e7d560d51d0f6e646fa65c0485824256328e6baa2b963dec2ac4
SSDEEP

1536:lDWzy3ZDTR9cpa8/ba02X6VZVYKIGrtTX6cdg1MQ80eCAVgNHgf5G+9eRlq4RjgD:lDXb918z5FVYKJXng1Mf7NiNHy5XeRlQ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/DubaTool_MSNFunny.EXE	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DubaTool_MSNFunny.EXE

Files

8961a2264607f44e4c6dc801674e1922
.rar
DubaTool_MSNFunny.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iduba
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
下载说明.htm
.html .js polyglot