General

  • Target

    bdb8b97b9a7f6962be1ff749ed2b8011

  • Size

    111KB

  • MD5

    bdb8b97b9a7f6962be1ff749ed2b8011

  • SHA1

    219392b2c01bb2b536f512a63f96181e95c2a7b1

  • SHA256

    fd39433be26c4426c869cf1dba176fc6786e0dd4575e32fbfd1d664633e579fd

  • SHA512

    94ae3df67030b0e47aeb493f22a2d61227c93877ee9e9d92abc143b5a3772e63448f56eb40f72533c6b2ea74dd7b1ae85a6f5fd7a521c5b644b80a5da6b5073b

  • SSDEEP

    3072:2SuZEc38qOrCK2INYdlTnxKtEYLSzFnGSl:2SuZEc3HKEhKtEphr

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bdb8b97b9a7f6962be1ff749ed2b8011
    .rar
  • EditTool32V120/EditTool32.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • EditTool32V120/readme.txt
  • EditTool32V120/source/Edit32.cpp
  • EditTool32V120/source/Edit32.dsp
  • EditTool32V120/source/Edit32.dsw
  • EditTool32V120/source/Edit32.ncb
  • EditTool32V120/source/Edit32.opt
  • EditTool32V120/source/Edit32.plg
    .html
  • EditTool32V120/source/EditIo.h
  • EditTool32V120/source/Resource.h
  • EditTool32V120/source/Script1.rc
  • EditTool32V120/source/StdAfx.h
  • EditTool32V120/下载说明.htm
    .html .js polyglot