c7a27b1e8fdbb1217f25d75145eaa11a

Sharing

Copy URL Twitter E-mail

General

Target
c7a27b1e8fdbb1217f25d75145eaa11a
Size 335KB
Sample240314-ekzedacc26
SHA256 83f15b1785e8be0ad4e5fecfda512b5dec2a375769c37094d1189c946a38bfb8
MD5 c7a27b1e8fdbb1217f25d75145eaa11a
SHA1 a1bfc466657cb8d19a660bcf47d73ea6357df257
SHA512 e8cf23cdd0a07a1395c6d51544b8929cd417ce1d5ff34b1edc4acd68ebfa7f213ec385ba71b25572dcf1dc6d3d70889f651c03a97be9d8054ff9672d12d095cb
SSDEEP 6144:OSdHPRc9MCNCMbgvmgi1SCnpI/wq5UPuZahwKWd6ovHmV+O5VOuu/7hDf14+bTi:zHZc/apirowEUWd3dtXO5VOh9Jb
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7a27b1e8fdbb1217f25d75145eaa11a

File Explorer

c7a27b1e8fdbb1217f25d75145eaa11a

.dll 335KB

c7a27b1e8fdbb1217f25d75145eaa11a

SHA256 83f15b1785e8be0ad4e5fecfda512b5dec2a375769c37094d1189c946a38bfb8
MD5 c7a27b1e8fdbb1217f25d75145eaa11a
SHA1 a1bfc466657cb8d19a660bcf47d73ea6357df257
SHA512 e8cf23cdd0a07a1395c6d51544b8929cd417ce1d5ff34b1edc4acd68ebfa7f213ec385ba71b25572dcf1dc6d3d70889f651c03a97be9d8054ff9672d12d095cb
SSDEEP 6144:OSdHPRc9MCNCMbgvmgi1SCnpI/wq5UPuZahwKWd6ovHmV+O5VOuu/7hDf14+bTi:zHZc/apirowEUWd3dtXO5VOh9Jb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

978945

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

@$xp$10TCCalendar @$xp$17TPerformanceGraph @$xp$27Cdiroutl@TCDirectoryOutline @$xp$7TCGauge @@Ccalendr@Finalize @@Ccalendr@Initialize @@Cdiroutl@Finalize @@Cdiroutl@Initialize @@Cgauges@Finalize @@Cgauges@Initialize @@Game1@Finalize @@Game1@Initialize @@Game2@Finalize @@Game2@Initialize @@Game3@Finalize @@Game3@Initialize @@Game4@Finalize @@Game4@Initialize @@Game5@Finalize @@Game5@Initialize @@Game6@Finalize @@Game6@Initialize @@Perfgrap@Finalize @@Perfgrap@Initialize @Cdiroutl@TCDirectoryOutline@ @Cdiroutl@TCDirectoryOutline@$bctr$qqrp18Classes@TComponent @Cdiroutl@TCDirectoryOutline@APointer @Cdiroutl@TCDirectoryOutline@AssignCaseProc$qqrv @Cdiroutl@TCDirectoryOutline@BuildOneLevel$qqrl @Cdiroutl@TCDirectoryOutline@BuildSubTree$qqrl @Cdiroutl@TCDirectoryOutline@BuildTree$qqrv @Cdiroutl@TCDirectoryOutline@Change$qqrv @Cdiroutl@TCDirectoryOutline@Click$qqrv @Cdiroutl@TCDirectoryOutline@CreateWnd$qqrv @Cdiroutl@TCDirectoryOutline@CurDir$qv @Cdiroutl@TCDirectoryOutline@DriveToInt$qqrc @Cdiroutl@TCDirectoryOutline@Expand$qqri @Cdiroutl@TCDirectoryOutline@ForceCase$qqrrx17System@AnsiString @Cdiroutl@TCDirectoryOutline@GetChildNamed$qqrrx17System@AnsiStringl @Cdiroutl@TCDirectoryOutline@InvalidIndex @Cdiroutl@TCDirectoryOutline@Loaded$qqrv @Cdiroutl@TCDirectoryOutline@RootIndex @Cdiroutl@TCDirectoryOutline@SetDirectory$qqr17System@AnsiString @Cdiroutl@TCDirectoryOutline@SetDrive$qqrc @Cdiroutl@TCDirectoryOutline@SetTextCase$qqr18Cdiroutl@TTextCase @Cdiroutl@TCDirectoryOutline@WalkTree$qqrrx17System@AnsiString @TCCalendar@ @TCCalendar@$bctr$qqrp18Classes@TComponent @TCCalendar@Change$qqrv @TCCalendar@ChangeMonth$qqri @TCCalendar@Click$qqrv @TCCalendar@DaysPerMonth$qqrii @TCCalendar@DaysThisMonth$qqrv @TCCalendar@Dispatch$qqrpv @TCCalendar@DrawCell$qqriirx11Types@TRect42System@%Set$t14Grids@Grids__3$iuc$0$iuc$2% @TCCalendar@GetCellText$qqrii @TCCalendar@GetDateElement$qqri @TCCalendar@IsLeapYear$qqri @TCCalendar@NextMonth$qqrv @TCCalendar@NextYear$qqrv @TCCalendar@PrevMonth$qqrv @TCCalendar@PrevYear$qqrv @TCCalendar@SeTCCalendarDate$qqr16System@TDateTime @TCCalendar@SelectCell$qqrii @TCCalendar@SetDateElement$qqrii @TCCalendar@SetStartOfWeek$qqrs @TCCalendar@SetUseCurrentDate$qqro @TCCalendar@StoreCalendarDate$qqrv @TCCalendar@UpdateCalendar$qqrv @TCCalendar@WMSize$qqrr16Messages@TWMSize @TCGauge@ @TCGauge@$bctr$qqrp18Classes@TComponent @TCGauge@AddProgress$qqrl @TCGauge@GetPercentDone$qqrv @TCGauge@Paint$qqrv @TCGauge@PaintAsBar$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsNeedle$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsNothing$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsPie$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsText$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintBackground$qqrp16Graphics@TBitmap @TCGauge@SeTCGaugeKind$qqr11TCGaugeKind @TCGauge@SetBackColor$qqr15Graphics@TColor @TCGauge@SetBorderStyle$qqr22Forms@TFormBorderStyle @TCGauge@SetForeColor$qqr15Graphics@TColor @TCGauge@SetMaxValue$qqrl @TCGauge@SetMinValue$qqrl @TCGauge@SetProgress$qqrl @TCGauge@SetShowText$qqro @TPerformanceGraph@ @TPerformanceGraph@$bctr$qqrp18Classes@TComponent @TPerformanceGraph@$bdtr$qqrv @TPerformanceGraph@DataPoint$qqr15Graphics@TColorl @TPerformanceGraph@DisplayPoints$qqrl @TPerformanceGraph@FirstY$qqrv @TPerformanceGraph@GetBandCount$qqrv @TPerformanceGraph@Initialize$qqrl @TPerformanceGraph@LastY$qqri @TPerformanceGraph@NextY$qqri @TPerformanceGraph@Paint$qqrv @TPerformanceGraph@PaintBar$qqr15Graphics@TColorll @TPerformanceGraph@PaintLine$qqr15Graphics@TColorll @TPerformanceGraph@ReallocHistory$qqrv @TPerformanceGraph@Replay$qqrv @TPerformanceGraph@RoundUp$qqrll @TPerformanceGraph@ScrollGraph$qqrv @TPerformanceGraph@SetBackColor$qqr15Graphics@TColor @TPerformanceGraph@SetForeColor$qqr15Graphics@TColor @TPerformanceGraph@SetGradient$qqrl @TPerformanceGraph@SetGraphKind$qqr10TGraphKind @TPerformanceGraph@SetGridSize$qqrl @TPerformanceGraph@SetGridlines$qqro @TPerformanceGraph@SetPenWidth$qqrl @TPerformanceGraph@SetScale$qqrl @TPerformanceGraph@SetStepSize$qqrl @TPerformanceGraph@ShiftY$qqrv @TPerformanceGraph@Update$qqrv SetHookGame UninstallHook _Game ___CPPdebugHook

Name

.text

Size

265KB

Virtual Size

692KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

14KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

28KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

c7a27b1e8fdbb1217f25d75145eaa11a

generic