8ffb5dffcedbaf4dd3f00b7c9d203029 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ffb5dffcedbaf4dd3f00b7c9d203029
Size

152KB
MD5

8ffb5dffcedbaf4dd3f00b7c9d203029
SHA1

a5151eef85863b22c0dec9857f1018b20c915d91
SHA256

15bae248d109eec83154e443e44748b887b0f9ab115e5d243cb1fd6e332292d8
SHA512

ad2dbc2197ca626c1e13d850fb28e8aa31ab391c8f0d1bf54c777ceae76a38f28dae0521df393c54d9a11725c932bfbdf77d0bef965fed7fe478e24e7adea87f
SSDEEP

3072:a8ulby79OaTZQmeNkZ5xNEG6yrcpHPf1JCho:ag79OUXmKNk/FcC

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/iGAMESPEED.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/iGAMESPEED.exe

Files

8ffb5dffcedbaf4dd3f00b7c9d203029
.rar
iGAMESPEED.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 58KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url