b75f4a54b299908c99ee80babe572b71

resource	yara_rule
static1/unpack001/诚信通信息重发器/Rsend.exe	aspack_v212_v242

resource
unpack001/诚信通信息重发器/Rsend.exe

SHA256 c2d0429ea6c60c153ebbbf19ff79dc21d73767b57dc5a1c71d3df94c7cb36e51
MD5 b75f4a54b299908c99ee80babe572b71
SHA1 45d09f8e05fe6aa924a56227accff668d56e87b0
SHA512 eb85ad4193a0de40c9c9547bded6c2e1654b979b801dbf258c01b0abcde1f30e70fb3d52988fe947fef21d2f0a1a71a8a6f45a2cedb91be16687f74d1bb99355
SSDEEP 12288:++56FmYttm87YBW64yA/jn1iPBnhHDiM2gFVV3HafEIoqN5jpxwt5:+ogz3YIXSRhHDiM3VuEIogr2
MD5 SHA1 SHA512 SSDEEP

诚信通信息重发器/Readme.txt

SHA256 f2afa8b06e53282a6d3d9db71712fac115442205654eb7fbeab5d521fff16da5
MD5 c3cacf20e0243f20108a13b92fafe467
SHA1 e03e8b8340cf0b9e70ed3437d821125168f0b0a9
SHA512 43671589aed3a4248d97d7ea3636809b9f472e4ed0eb626eafd980ab787c147ed1c5f54fd61aa0e04fb236dc17c68aa8911794d118e87aa6e504cbe66aa36d0c
MD5 SHA1 SHA512

诚信通信息重发器/Rsend.exe

SHA256 aa06f016bfa1d274fd9be8e46fa43712a1eca3a74aea6153a5e635f36ca05e53
MD5 e4bff70c8ec1e6bad57095226d109a42
SHA1 b998a6e3550e48256f11045e3a5a7b0f56a913de
SHA512 67d140be8fb78f1336f3c4716218b62b313cc39ea9c5869c9343f232f7c7e95791aac057867aa91db2cfbb5c6bb3ae5b948ba2c811116232600317106c281692
SSDEEP 12288:EPuMdsqH7G1ZZ73wJnPsjXTWBV41EQsOacp:EPB7Gt73WPCBSQsOaQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1470465

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

303KB

Virtual Size

792KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

157KB

Virtual Size

536KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

30KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

诚信通信息重发器/Rsend.mdb

SHA256 51b5bedf3318249e0272e70bb0ae6671eb61cca85089fc02a60a9f2e958c358f
MD5 b7d02ac1b3b5e61a702d95f7a84c6bd8
SHA1 9513d2ff7ff6013501e90285b2efadde4d2084f9
SHA512 63801f9c17dc39243603b7496f4b468f4c723391c2df39fed5bd859a200cfeae8a9f4fce882d45bbc4c883603f468cb9078530ec04f8e6cbc0bc93bb1b33f6cd
SSDEEP 384:cHLEuXwdiQQ5qm3KyNBN39uFUEU2zjyYrl/I:cHLPAd6nKdnyYx/I
MD5 SHA1 SHA512 SSDEEP

诚信通信息重发器/UpdateLog.txt

SHA256 bc659750222bf4113039f46435276e0a4cd6ef719b1c0e87efdd4022e3df9cea
MD5 2217e9511f9b7676269b1ddb44ba911c
SHA1 8d197bb5bc205adf579e74c0271390c87a06f3fc
SHA512 d290e54c527d75af430b95090bab01f8b5545532e6cf06e2ed6eaf6501d8d0dad7e8839a34d884c73b30efc8d6ce9ffff5fbcf6a10aecdfa6c079153c8d8fb55
MD5 SHA1 SHA512

诚信通信息重发器/alirsend.jpg

SHA256 1eb21bfd71c61cb5c1db0f6d8321d0bae01faf1c5f922e43ea3609da875ccf9b
MD5 ea479354a7fee2e19f62ebb4b029738b
SHA1 aca56fc7d74e1e18f4dc08eb68f39e78d8a3f72c
SHA512 70e3672bbead20cf2a4724fdc284e4ce9b0897c8880aee1b27221e7aa3cf574c792ebd82465e0c02438d91d0c61bc8d8f6617e9f4e666ad8a327187c9f8774ea
SSDEEP 768:1LCrRdPWMIKyOCQceBdQeAYbXPnLGvlQsa5yazfVAYEHE0Tq9j881HX:1wdjjnDLGyPnLGSeaYk0TU5
MD5 SHA1 SHA512 SSDEEP

诚信通信息重发器/新云软件.url

SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
MD5 4f0017b3b346bd0626f0c3b915e6e734
SHA1 823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
SHA512 0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer