b1cdd534ec6cfbea6bd027341dc23de6

General

Target
b1cdd534ec6cfbea6bd027341dc23de6
Size 2.4MB
Sample240304-lmr7eafb9v
SHA256 765555862f779f07f5d50b07e96bede9bd5ecb07b8ed4c9a1b94128302475269
MD5 b1cdd534ec6cfbea6bd027341dc23de6
SHA1 2fa6fec388a051dabcf1da50ad2bbb30f3d9fd53
SHA512 155a24c70aeb8e8afeeb1b2402ab3569668598f33f8f06b3b8403a101b7d997dc2183c09d28ec28185d0a2968399482eaaa6a3471b6a5941d7d19f5cf54dec5d
SSDEEP 49152:GuVZTizTSpXwhTLhhGRAvrofywiKrf828vo5OM6O5JqMuh/:PVZTCCw93GRAvkgy88+Axuh/
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/公司取名软件.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/公司取名软件.exe

File Explorer

b1cdd534ec6cfbea6bd027341dc23de6

.rar 2.4MB
公司取名软件.exe

.exe 2.4MB
新云软件.url

.url 133B

b1cdd534ec6cfbea6bd027341dc23de6

SHA256 765555862f779f07f5d50b07e96bede9bd5ecb07b8ed4c9a1b94128302475269
MD5 b1cdd534ec6cfbea6bd027341dc23de6
SHA1 2fa6fec388a051dabcf1da50ad2bbb30f3d9fd53
SHA512 155a24c70aeb8e8afeeb1b2402ab3569668598f33f8f06b3b8403a101b7d997dc2183c09d28ec28185d0a2968399482eaaa6a3471b6a5941d7d19f5cf54dec5d
SSDEEP 49152:GuVZTizTSpXwhTLhhGRAvrofywiKrf828vo5OM6O5JqMuh/:PVZTCCw93GRAvkgy88+Axuh/
MD5 SHA1 SHA512 SSDEEP

公司取名软件.exe

SHA256 097e476ad87f230f72691ba82e86fda468d7a98b1fb0b793b47338e93c2b436c
MD5 17b31285b93b2ace1aba9e9584f6ed55
SHA1 58722cf122986545d2989b48c9e9435109717fac
SHA512 cb80a1a99a8aaf0cbcc1d2388868853953280e84d2c455ef622118a05b3cb57ae8c8a27de961f4fa8b3c46fbbdf96c976562921c17960089c88ff3e48c4b992b
SSDEEP 49152:iG/PCk5mHXRmul8dWxlZmIfrS9A4FMVEFQ+LU5aGulmIqmDsTk5rZnPJbg:BqkFu+44EdlVECP5X5isorzb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5677057

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

401KB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.9MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

43KB

Virtual Size

380KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

b1cdd534ec6cfbea6bd027341dc23de6

公司取名软件.exe

generic

新云软件.url