c8a1fca4bb6304991fe42c60d329a5b2

resource	yara_rule
static1/unpack001/czzrsoftvideocap/VideoCap.exe	aspack_v212_v242

resource
unpack001/czzrsoftvideocap/VideoCap.exe

SHA256 954ea272b1fdd08122a9799ef06a0132cc7e6bee4bacefd024f205a834f6ea68
MD5 c8a1fca4bb6304991fe42c60d329a5b2
SHA1 515af587a48c4e4a1b6fa841f029932e7ed9f1d0
SHA512 64add29acd6a95f27bc306106f6abefb568acb1ce99660c03945d98b165f180e2992a2cccc28f4ac0431b92ae964f2de95d0998667cc21f7d7603e0c9b490561
SSDEEP 12288:r2Xn2lRBwvycHAnN7pRhHk8gAG02nneWQs1ohbMmES51C0i+QZY5u+1:r2X2lXSyfILAGLneps1ohbMm5nC0bT1
MD5 SHA1 SHA512 SSDEEP

czzrsoftvideocap/VideoCap.exe

SHA256 593c4797db1e4ad149475b5d3170d3f4810e8e787d9d403f415de6fe3152243a
MD5 fea07fb09fbabe168208e6b732ff73cc
SHA1 6934d7e6f07c5be47e71e46aaa32fd1f18b5ca48
SHA512 2407b804748ffc15ef0e1afbdbad3532f32bebd9e2dccdc0f4f5b529bef187565c7f57c7798d36d173f62e022cf8d00e501b993940e2d0e19efce45470438753
SSDEEP 12288:LWdM+nBYRdJVI8xOJspDRKWPkVS2nvx834N3+IXlFSCa9:LB+6RdzICRpdJPrLoNFTSCa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1355777

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

306KB

Virtual Size

772KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

144KB

Virtual Size

464KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

163KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

czzrsoftvideocap/help.html

SHA256 c2b422994325f25773670215b8351ef362cb9a9fc953e6362feeed0402a7d5d7
MD5 90345008eee381dc2d06a0a7d057d667
SHA1 d310b73e9f1aeb83381a5f0a2dc8810d1bca385c
SHA512 74eacf4fca0a2ed97635195570295065c8bcb075a7a12c2b4b96377a0ac0a9115754fc3758d43bb8589f5f257629706008268c83227dfea2646a1945c3ac2c0b
SSDEEP 192:NaarwWGTAxG0H2ct+S8SzYxKdYk2OREVyTCe:Aa8W04nzEFWm+H
MD5 SHA1 SHA512 SSDEEP

czzrsoftvideocap/images/2.png

SHA256 449ea18cae9f91121ec692acfef81d524aea9a296002a9a2bd9b9bfac92e3cac
MD5 003598e9a6d8e972f5b709af11489ed3
SHA1 42ba02a3aaceb3f1ce0b54a93a6439dd32dbed58
SHA512 1318bcc2b376c2a24c13e6c31e5defd8b873563ee25d0f7b5df2e5a57e2088117879e031697bab1d929e4b6e3704f871d5160e314e7d36d02c173e9560e90fd6
SSDEEP 384:DRJJDeyhQZ4cxwKyFuDtLHcnutIuyxfi3LMsofNSY:DH1lm5RynutIuSO7AIY
MD5 SHA1 SHA512 SSDEEP

czzrsoftvideocap/images/img17159656.png

SHA256 6590145f6f7bca30967d48e07bebc7735f06d3b286a0361ff467ef02b76e2946
MD5 01c76bee709a121d0a9134120e73f887
SHA1 e9d40239c95f2ec61f9c7c9aaa323c8bbf9eca8c
SHA512 eca5fce7a36c97a22cd69ba9f08216382e9112b0818a41a935a6b62e1bd4a6d47ef75f6514d041100948e3eba22e0c4828b27b9db575eb1d88b2ae70c703213f
SSDEEP 768:1cEAVps0lsotErHKPg5VyhsGwaum9RcprK55UVG:1UndlHErq46hs4Ncq5eG
MD5 SHA1 SHA512 SSDEEP

czzrsoftvideocap/images/shape14872265.gif

SHA256 d1e4d8c975707df41f2d12038b90e1819c9ea4ce0d6cf2d2ed9a598dfac52de6
MD5 6a34fee15190daee13e5c9263e1ccf7c
SHA1 084f1f5378ffad202e5b2b2d0592e1ad4c20a148
SHA512 c0e0f9223e21b7a6e124d8f5b0d1177b454bb4fcafce0a399cdadcbe985441fb897df094a8025881044a5fc05644d24c95b778506f831dab0b28b662717414e5
MD5 SHA1 SHA512

czzrsoftvideocap/images/shape15076250.gif

SHA256 0c1f2f510b8e352663c36af2e6fe4102075336c496c389d6678143b9076c29d2
MD5 3478847e8d8be4ef1acba76cdd7154fd
SHA1 ea184fded279ce71f14f15af7256b5c18c914e0c
SHA512 cab2f8797f523c37507631fd735662969b4aa2e9775f8d9d58a003ce0b07ab13466d29baa7182a7945effe8acda8b8ef09b9350a480dd3951916a78bafc5a054
SSDEEP 96:kUX/leCmWJsY7fLVFj+RMUeUglp5F7nan3:f9ebBCLVR+RMUeU8DW
MD5 SHA1 SHA512 SSDEEP

czzrsoftvideocap/新云软件.url

SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
MD5 4f0017b3b346bd0626f0c3b915e6e734
SHA1 823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
SHA512 0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer