c40ae254ec7a6b715967ba7efe40f381 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c40ae254ec7a6b715967ba7efe40f381
Size

526KB
MD5

c40ae254ec7a6b715967ba7efe40f381
SHA1

e38e2309a4b81be543675f56c77137ad87542f1a
SHA256

57783dcb4b91f79d6427e4beeb48a9191f3e0019d070674ca2469d29f04fa3a6
SHA512

9984ebaec81fb6540c68d0207223a3008170907381819d16f0d855fe55b5a2ad716bfb1e4c7dc0848b4f04cc5abc5682bd4a2e7d7cea9d129d1111154d1e74ba
SSDEEP

12288:bWLNO9itCY6nmGSUj/JeAEKPQfgnA7sfAjZg6EJNR7l8C:whXWLJeyAagv3EJNR7l8C

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/文本转换大师 2011 v1.0/文本转换大师 2011 v1.0.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/文本转换大师 2011 v1.0/文本转换大师 2011 v1.0.exe

Files

c40ae254ec7a6b715967ba7efe40f381
.rar
文本转换大师 2011 v1.0/文本转换大师 2011 v1.0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 222KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 142KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 143KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
文本转换大师 2011 v1.0/新云软件.url
.url
文本转换大师 2011 v1.0/说明.txt
文本转换大师 2011 v1.0/软件截图.png
.png