baff448fec52e0799075c9890661bfbd

General

Target
baff448fec52e0799075c9890661bfbd
Size 142KB
Sample240308-l7274scd74
SHA256 3ea2111fa99eddac525f39c8fcdf73ebcd33a49ec43ef0037a7a53f50b6dba88
MD5 baff448fec52e0799075c9890661bfbd
SHA1 36ab52f2fcd2dae16544f7b10369139ae39e8d67
SHA512 83dffb87d2823d3c177f4f74fae95a18126a36ee54d1f73f1cec2aeb601f6d9972927741e89f3a4aa1726a072e25b4327af674d3eb042566cdd1f293df669935
SSDEEP 3072:jETDxoetXclixyIVqGxda7KYW+RS1uuNVo0lL3+S0tf5BWUKtYfmjS5:ITD+lSyIVqReYfRMuuNChtfImfP
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/file.htm .pif	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/file.htm .pif

File Explorer

baff448fec52e0799075c9890661bfbd

.zip 142KB
file.htm .pif

.exe 142KB

baff448fec52e0799075c9890661bfbd

SHA256 3ea2111fa99eddac525f39c8fcdf73ebcd33a49ec43ef0037a7a53f50b6dba88
MD5 baff448fec52e0799075c9890661bfbd
SHA1 36ab52f2fcd2dae16544f7b10369139ae39e8d67
SHA512 83dffb87d2823d3c177f4f74fae95a18126a36ee54d1f73f1cec2aeb601f6d9972927741e89f3a4aa1726a072e25b4327af674d3eb042566cdd1f293df669935
SSDEEP 3072:jETDxoetXclixyIVqGxda7KYW+RS1uuNVo0lL3+S0tf5BWUKtYfmjS5:ITD+lSyIVqReYfRMuuNChtfImfP
MD5 SHA1 SHA512 SSDEEP

file.htm .pif

SHA256 6c9957a4dd3263a19224fbff886d3693b4ef0d2e58b29a1c588725d85486b599
MD5 aa3b7fb0e958ba0537cfda8472167ba8
SHA1 44db25090286215986de07c220ff05ef09b08357
SHA512 2664c58d57b013e617d5f74ccc03c6ef742fdd085c5e59dbc6b96e621984c132594f942946db3b2f1041dad39618bd89e55cd15d4edf43798445e542524efef9
SSDEEP 3072:/ETDxoetXclixyIVqGxda7KYW+RS1uuNVo0lL3+S0tf5BWUKtYfmjSB:MTD+lSyIVqReYfRMuuNChtfImfj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

352257

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

pec1

Size

40KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pec2

Size

92KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

baff448fec52e0799075c9890661bfbd

file.htm .pif

generic