ae87d84ea8b115567f44fcad672036c4

Sharing

Copy URL Twitter E-mail

General

Target
ae87d84ea8b115567f44fcad672036c4
Size 262KB
Sample240229-ps7e3aha71
SHA256 912ae7f25a965e8663af1e27d9a201c3a42d6f41d989853b57fdfc944f83a440
MD5 ae87d84ea8b115567f44fcad672036c4
SHA1 829b577bb5523071fe5d5da3d1e407fd875e5e3c
SHA512 740a33d1e351fd035cbb62e67431ca5f3aa25d1cf6baa26a8ce45f855b8590e39d120a78ecb0fa8d66023d5c4d9c0b3c1e5f84478cb529951550575b2e7ca08d
SSDEEP 6144:Xca4HJwIG7tHhUpWux9cllivcct/Ka7DMwxNeilxBXkqitmqPhlWLrO:sXpwIOUPAlBO/Kacw/xChb
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/ultrashredder.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ultrashredder.exe

File Explorer

ae87d84ea8b115567f44fcad672036c4

.rar 262KB
readme.txt

2KB
ultrashredder.exe

.exe 268KB
新云软件.url

.url 133B

ae87d84ea8b115567f44fcad672036c4

SHA256 912ae7f25a965e8663af1e27d9a201c3a42d6f41d989853b57fdfc944f83a440
MD5 ae87d84ea8b115567f44fcad672036c4
SHA1 829b577bb5523071fe5d5da3d1e407fd875e5e3c
SHA512 740a33d1e351fd035cbb62e67431ca5f3aa25d1cf6baa26a8ce45f855b8590e39d120a78ecb0fa8d66023d5c4d9c0b3c1e5f84478cb529951550575b2e7ca08d
SSDEEP 6144:Xca4HJwIG7tHhUpWux9cllivcct/Ka7DMwxNeilxBXkqitmqPhlWLrO:sXpwIOUPAlBO/Kacw/xChb
MD5 SHA1 SHA512 SSDEEP

ultrashredder.exe

SHA256 9e41bb56df932f83c5be7fbe936e758173d21184ae994922123e331f1cc3f21a
MD5 5832e6f7cacb012aedabeb4711b78c7b
SHA1 a5126e8b13189c47d3febd8a8e58c5849c21b4e9
SHA512 b12c8cc1c530eb581bee5d48c031f6d2411adad8b50731d4db730b9f25e4947675320eba85f8bd11f5e41cc15ea586a7b39750767cdb8051e591557b4a35c817
SSDEEP 6144:3QyAyyCpp9T9PTlRuL2cYt2x4PZ86Wshw6oiI9mCAEV2Mc8eT:AyAqpLVT+L2DY4pyAWu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

729089

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

237KB

Virtual Size

580KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

ae87d84ea8b115567f44fcad672036c4

readme.txt

ultrashredder.exe

generic

新云软件.url