be7b23027f9cb47168755a5c5f641e24

Sharing

Copy URL Twitter E-mail

General

Target

be7b23027f9cb47168755a5c5f641e24
Size

561KB
MD5

be7b23027f9cb47168755a5c5f641e24
SHA1

dc7f43a2dfdd0da16acbc92a33e3635c808c33ec
SHA256

3462c0786248500d0e18d80024a77395ceeb8fed8b0adf3a83591e6ad664ab21
SHA512

299bf6f867002b454c9b27abe6248b80229faf59ab8085a27c55f1c26fb16c651fce6101beec2fe3feb595272b3377698b3a833e06f804e93be756795a13cf53
SSDEEP

12288:rx6svPfS1FufYuZE2gt1rpNg+qYKNfmILcIsvidd13bteEv:FVvUFuYoQMqil3dH3bteEv

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

be7b23027f9cb47168755a5c5f641e24
.exe windows:4 windows x86 arch:x86

Code Sign

4a:f7:4d:10:ce:1d:a1:7e:c9:80:9e:67:d8:1c:37:56:14:a1:f0:ff
Certificate

Issuer

CN=PROGUARD,OU=PROGUARD,O=PROGUARD,L=macaé,ST=Rio de janeiro,C=BR,1.2.840.113549.1.9.1=#0c1150524f4755415244404c4956452e434f4d

Not Before

26/02/2021, 18:38

Not After

26/02/2022, 18:38

Subject

CN=PROGUARD,OU=PROGUARD,O=PROGUARD,L=macaé,ST=Rio de janeiro,C=BR,1.2.840.113549.1.9.1=#0c1150524f4755415244404c4956452e434f4d

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4a:f7:4d:10:ce:1d:a1:7e:c9:80:9e:67:d8:1c:37:56:14:a1:f0:ff
Certificate

Issuer

CN=PROGUARD,OU=PROGUARD,O=PROGUARD,L=macaé,ST=Rio de janeiro,C=BR,1.2.840.113549.1.9.1=#0c1150524f4755415244404c4956452e434f4d

Not Before

26/02/2021, 18:38

Not After

26/02/2022, 18:38

Subject

CN=PROGUARD,OU=PROGUARD,O=PROGUARD,L=macaé,ST=Rio de janeiro,C=BR,1.2.840.113549.1.9.1=#0c1150524f4755415244404c4956452e434f4d

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:e2:f8:fa:b5:db:7e:f6:7d:ce:8e:2b:ff:88:c0:20:cb:6f:e1:fd:9e:1a:a6:4d:22:71:7e:a0:08:3f:2d:16
Signer

Actual PE Digest

93:e2:f8:fa:b5:db:7e:f6:7d:ce:8e:2b:ff:88:c0:20:cb:6f:e1:fd:9e:1a:a6:4d:22:71:7e:a0:08:3f:2d:16

Digest Algorithm

sha256

PE Digest Matches

true

2b:0f:3f:02:c2:82:c3:a1:b1:48:0f:43:a5:28:ec:d0:55:4a:83:36
Signer

Actual PE Digest

2b:0f:3f:02:c2:82:c3:a1:b1:48:0f:43:a5:28:ec:d0:55:4a:83:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 416KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 19KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: 1024B - Virtual size: 131.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo0
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo1
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo2
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo3
Size: 4KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

4a:f7:4d:10:ce:1d:a1:7e:c9:80:9e:67:d8:1c:37:56:14:a1:f0:ffCertificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

4a:f7:4d:10:ce:1d:a1:7e:c9:80:9e:67:d8:1c:37:56:14:a1:f0:ffCertificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

93:e2:f8:fa:b5:db:7e:f6:7d:ce:8e:2b:ff:88:c0:20:cb:6f:e1:fd:9e:1a:a6:4d:22:71:7e:a0:08:3f:2d:16Signer

2b:0f:3f:02:c2:82:c3:a1:b1:48:0f:43:a5:28:ec:d0:55:4a:83:36Signer

Headers

File Characteristics

Sections

Size: 416KB - Virtual size: 1.3MB

Size: 12KB - Virtual size: 24KB

Size: 19KB - Virtual size: 60KB

0 Size: 1024B - Virtual size: 131.4MB

.rsrc Size: 512B - Virtual size: 12KB

.data Size: 69KB - Virtual size: 72KB

.adata Size: - Virtual size: 4KB

.mackt Size: 2KB - Virtual size: 8KB

.topo0 Size: 3KB - Virtual size: 880KB

.topo1 Size: 3KB - Virtual size: 880KB

.topo2 Size: 3KB - Virtual size: 880KB

.topo3 Size: 4KB - Virtual size: 880KB

.aspack Size: 12KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

4a:f7:4d:10:ce:1d:a1:7e:c9:80:9e:67:d8:1c:37:56:14:a1:f0:ff
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

4a:f7:4d:10:ce:1d:a1:7e:c9:80:9e:67:d8:1c:37:56:14:a1:f0:ff
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

93:e2:f8:fa:b5:db:7e:f6:7d:ce:8e:2b:ff:88:c0:20:cb:6f:e1:fd:9e:1a:a6:4d:22:71:7e:a0:08:3f:2d:16
Signer

2b:0f:3f:02:c2:82:c3:a1:b1:48:0f:43:a5:28:ec:d0:55:4a:83:36
Signer

0
Size: 1024B - Virtual size: 131.4MB

.rsrc
Size: 512B - Virtual size: 12KB

.data
Size: 69KB - Virtual size: 72KB

.adata
Size: - Virtual size: 4KB

.mackt
Size: 2KB - Virtual size: 8KB

.topo0
Size: 3KB - Virtual size: 880KB

.topo1
Size: 3KB - Virtual size: 880KB

.topo2
Size: 3KB - Virtual size: 880KB

.topo3
Size: 4KB - Virtual size: 880KB

.aspack
Size: 12KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB