VirusShare-52283d3c369568d1fc277fc1aa21bf23

General

Target

VirusShare-52283d3c369568d1fc277fc1aa21bf23
Size

52KB
MD5

52283d3c369568d1fc277fc1aa21bf23
SHA1

2747f5bea37e62abf5d81c28a394f86e9e1d2e38
SHA256

d08a2d1b1fa0b321c54d283614e169a8489a04b9b824f340c812c2fe2279455b
SHA512

78dc9ff994730a3b83f7c6d7bcef20d0ec4ef4eb8d76e8878839c08fa4928f42942efba3074976a48e36aa93d63d8d2f63a9e644a7821e49947e831d567a2217
SSDEEP

768:Izz4Eipsxz3hUifcdyf6o4gqGlF72SQDIHWoRDuwLkmhsochjueLktXwzhIFx7ay:IzES3hUifcdyfd1+/nUncy

Score

10^/10

Malware Config

Signatures

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-52283d3c369568d1fc277fc1aa21bf23

Files

VirusShare-52283d3c369568d1fc277fc1aa21bf23
.exe windows:4 windows x86 arch:x86

5bbb4bad3cd9ed779b3eea2fc12f032e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaVarCmpNe
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
ord662
_adj_fdiv_m32
__vbaVarCmpGe
ord593
ord594
__vbaObjSet
ord595
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord599
__vbaBoolVarNull
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarOr
_adj_fpatan
__vbaFixstrConstruct
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord608
ord716
__vbaFPException
__vbaInStrVar
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaFreeStrList
__vbaVarNot
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
ord610
__vbaLateMemCall
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarLateMemCallLd
__vbaVarTstGe
ord617
__vbaR8IntI2
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
__vbaFPInt
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5bbb4bad3cd9ed779b3eea2fc12f032e

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.aspack Size: 8KB - Virtual size: 8KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.aspack
Size: 8KB - Virtual size: 8KB