c56bc14a9f4532fc9a48d7befb3e2a13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c56bc14a9f4532fc9a48d7befb3e2a13
Size

349KB
MD5

c56bc14a9f4532fc9a48d7befb3e2a13
SHA1

66667be4b60a864c954c2a1b542050a721a75a9e
SHA256

a33459f9b7fc980d1b2bcc279f85df4f8fae1e4718db776968e2ca8dd476efb8
SHA512

5bac1ec7e98f8c3591309b2eaf5692d582bd0786ce4a9d8a64c8fe16b946bc92efcc52286267adc219fd25b9cb68a3cb9a8fe5348d9fe8d9f02cea86db9e0663
SSDEEP

6144:iJoMDwl5xbGlMo03BAi4zZ8mHkKq/ixP8nnmoWveJw4sxVkn7XCuIOuyBQtT0CSb:iJjwpbGlg36i4l8mE1AsNWvYbsgG/XyD

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/Behead.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Behead.exe

Files

c56bc14a9f4532fc9a48d7befb3e2a13
.rar
Behead.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Behead
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url