08bde796a36d8985341f29bb040907456ff66e6c412d0224c34dc85c490826e3

Sharing

Copy URL Twitter E-mail

General

Target

08bde796a36d8985341f29bb040907456ff66e6c412d0224c34dc85c490826e3
Size

583KB
MD5

cfa1149cf7acb72915ecfc5bf6d58d45
SHA1

26206cab3a48815c7f1133abfc41644c34810852
SHA256

08bde796a36d8985341f29bb040907456ff66e6c412d0224c34dc85c490826e3
SHA512

6d73ade83385b41560a50de9e6ad4dae38846f3990b1dedd65ae4b654e4aec309424da4867c7485efaad189daa16deefe75c69c440620ea08efb145f65fd9ed6
SSDEEP

12288:DnbyxUKWwwZ+0VCJGOK5Cvt3zFZaQpetSUSWKhNj:/dKnwZ7VC8OK5Cvt3jjUSU4jj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

08bde796a36d8985341f29bb040907456ff66e6c412d0224c34dc85c490826e3
.dll windows:5 windows x86 arch:x86

Code Sign

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

16/04/2020, 18:36

Not After

16/04/2045, 18:44

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:c5:e8:e8:50:60:ee:75:a9:c3:21:00:00:00:00:c5:e8
Certificate

Issuer

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Not Before

01/10/2024, 07:13

Not After

04/10/2024, 07:13

Subject

CN=BURNAWARE SL,O=BURNAWARE SL,L=MARBELLA,ST=Málaga,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:c5:e8:e8:50:60:ee:75:a9:c3:21:00:00:00:00:c5:e8
Certificate

Issuer

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Not Before

01/10/2024, 07:13

Not After

04/10/2024, 07:13

Subject

CN=BURNAWARE SL,O=BURNAWARE SL,L=MARBELLA,ST=Málaga,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:05:fb:7a:5c:32:13:61:df:5d:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Not Before

13/04/2021, 17:31

Not After

13/04/2026, 17:31

Subject

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

01/04/2021, 20:05

Not After

01/04/2036, 20:15

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

19/11/2020, 20:32

Not After

19/11/2035, 20:42

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:3e:d9:35:92:f7:b0:19:42:29:00:00:00:00:00:3e
Certificate

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Not Before

18/04/2024, 17:59

Not After

17/04/2025, 17:59

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:91A2-966C-63FB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

49:81:17:05:5d:0f:b0:3a:f6:87:7e:30:58:f2:8e:35:6c:2a:1c:3d:93:cb:b3:1a:33:e0:22:f7:cd:fd:df:4a
Signer

Actual PE Digest

49:81:17:05:5d:0f:b0:3a:f6:87:7e:30:58:f2:8e:35:6c:2a:1c:3d:93:cb:b3:1a:33:e0:22:f7:cd:fd:df:4a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetMode
RegisterApplication
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

Size: 190KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 40KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99Certificate

Key Usages

33:00:00:c5:e8:e8:50:60:ee:75:a9:c3:21:00:00:00:00:c5:e8Certificate

Extended Key Usages

Key Usages

33:00:00:c5:e8:e8:50:60:ee:75:a9:c3:21:00:00:00:00:c5:e8Certificate

Extended Key Usages

Key Usages

33:00:00:00:05:fb:7a:5c:32:13:61:df:5d:00:00:00:00:00:05Certificate

Key Usages

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07Certificate

Key Usages

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

33:00:00:00:3e:d9:35:92:f7:b0:19:42:29:00:00:00:00:00:3eCertificate

Extended Key Usages

Key Usages

49:81:17:05:5d:0f:b0:3a:f6:87:7e:30:58:f2:8e:35:6c:2a:1c:3d:93:cb:b3:1a:33:e0:22:f7:cd:fd:df:4aSigner

Headers

File Characteristics

Exports

Exports

Sections

Size: 190KB - Virtual size: 720KB

Size: 1KB - Virtual size: 4KB

Size: 5KB - Virtual size: 16KB

Size: - Virtual size: 34KB

Size: 3KB - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: 40KB - Virtual size: 76KB

.rsrc Size: 9KB - Virtual size: 12KB

.data Size: 316KB - Virtual size: 316KB

.adata Size: - Virtual size: 4KB

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Certificate

33:00:00:c5:e8:e8:50:60:ee:75:a9:c3:21:00:00:00:00:c5:e8
Certificate

33:00:00:c5:e8:e8:50:60:ee:75:a9:c3:21:00:00:00:00:c5:e8
Certificate

33:00:00:00:05:fb:7a:5c:32:13:61:df:5d:00:00:00:00:00:05
Certificate

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Certificate

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

33:00:00:00:3e:d9:35:92:f7:b0:19:42:29:00:00:00:00:00:3e
Certificate

49:81:17:05:5d:0f:b0:3a:f6:87:7e:30:58:f2:8e:35:6c:2a:1c:3d:93:cb:b3:1a:33:e0:22:f7:cd:fd:df:4a
Signer

.rsrc
Size: 9KB - Virtual size: 12KB

.data
Size: 316KB - Virtual size: 316KB

.adata
Size: - Virtual size: 4KB