7b63b94db41de960f3a989e7eacaeaa291579acea4adc0f97daed5c499b410f4

Sharing

Copy URL Twitter E-mail

General

Target

7b63b94db41de960f3a989e7eacaeaa291579acea4adc0f97daed5c499b410f4
Size

3.6MB
MD5

a54a4928960f9733b6f78470d3b6fecb
SHA1

dc733fedc965e452f936207dc88887c36e6c8873
SHA256

7b63b94db41de960f3a989e7eacaeaa291579acea4adc0f97daed5c499b410f4
SHA512

8504653beb6597ac755da4dfd3bc835c880bcaed2c1cab6b052a0abc648bd57200bf1c578b3460a0d56949ee62c960b9d882ae602a62e33a92c212f2b5fcd533
SSDEEP

98304:yGqDm8/rypVIGPhJEuL2oNOF3076h4nNKvV1+h32fHHF4VA9F:yG2m0y3IGEu743iLKvVBHF4AT

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

7b63b94db41de960f3a989e7eacaeaa291579acea4adc0f97daed5c499b410f4
.exe windows:4 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:fb:5d:f7:73:e0:06:6f:9e:1b:18:e3:73:d0:5e:e1
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19/10/2021, 00:00

Not After

17/10/2024, 23:59

Subject

CN=Beijing Changyou Creation Information Technology Co.\, Ltd.,O=Beijing Changyou Creation Information Technology Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

59:c2:b6:b5:62:e0:9e:f4:dd:e2:26:75:38:8a:67:af:98:e0:0f:6d:e9:65:bd:4b:fb:49:44:0f:d4:94:12:be
Signer

Actual PE Digest

59:c2:b6:b5:62:e0:9e:f4:dd:e2:26:75:38:8a:67:af:98:e0:0f:6d:e9:65:bd:4b:fb:49:44:0f:d4:94:12:be

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0e:fb:5d:f7:73:e0:06:6f:9e:1b:18:e3:73:d0:5e:e1Certificate

Extended Key Usages

Key Usages

59:c2:b6:b5:62:e0:9e:f4:dd:e2:26:75:38:8a:67:af:98:e0:0f:6d:e9:65:bd:4b:fb:49:44:0f:d4:94:12:beSigner

Headers

File Characteristics

Sections

.text Size: 16KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 8KB

.rsrc Size: 3.6MB - Virtual size: 3.7MB

.aspack Size: 15KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0e:fb:5d:f7:73:e0:06:6f:9e:1b:18:e3:73:d0:5e:e1
Certificate

59:c2:b6:b5:62:e0:9e:f4:dd:e2:26:75:38:8a:67:af:98:e0:0f:6d:e9:65:bd:4b:fb:49:44:0f:d4:94:12:be
Signer

.text
Size: 16KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 8KB

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

.aspack
Size: 15KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB