c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926

Sharing

Copy URL Twitter E-mail

General

Target
c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926
Size 32KB
Sample260527-vlk65sfx21
SHA256 c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926
MD5 b14e9e98c0f739c01788e0b477531f15
SHA1 81a870bac2f8e100aa1fcc27cb6a61d53a08b5b2
SHA512 f8cdb164d6ad16bd9f3092a46c0985b13cd1aea0635eff40069c91e59a62a29c9c81f3d17df576c5c27a3ab0a67020ae74e68027a0fe6d7cc6ce04a6cfc14130
SSDEEP 768:Hlf8KqUfxaMEXVIj8Dq8ywHq90Hl25Y1m5UA2cWFGbxJbPrKSYH0t:HlDzDEFe8gWF67
TLSH
T1B9E2F7E8FA494CBBD43AEC3646AC6C05C775791A85D2F3C260F689A36D3B6400F49F16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926

File Explorer

c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926

.dll 32KB

c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926

SHA256 c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926
MD5 b14e9e98c0f739c01788e0b477531f15
SHA1 81a870bac2f8e100aa1fcc27cb6a61d53a08b5b2
SHA512 f8cdb164d6ad16bd9f3092a46c0985b13cd1aea0635eff40069c91e59a62a29c9c81f3d17df576c5c27a3ab0a67020ae74e68027a0fe6d7cc6ce04a6cfc14130
SSDEEP 768:Hlf8KqUfxaMEXVIj8Dq8ywHq90Hl25Y1m5UA2cWFGbxJbPrKSYH0t:HlDzDEFe8gWF67
TLSH
T1B9E2F7E8FA494CBBD43AEC3646AC6C05C775791A85D2F3C260F689A36D3B6400F49F16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

73729

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

@$xp$29Uftfuncdecision@TFTFunc300001 @$xp$31Uftquerydecision@TFTQuery300002 @$xp$35Uftfuncdecision@TFTOpenResult300001 @$xp$36Uftquerydecision@TFTOpenResult300002 @$xp$39Uftinterinfodecision@TFTDecisionBplInfo @$xp$39Uftinterinfodecision@TFTInterInfo300001 @$xp$39Uftinterinfodecision@TFTInterInfo300002 @$xp$41Uftinterinfodecision@TFTTableInfoDay_Info @$xp$43Uftinterinfodecision@TFTTableInfoSTATREPORT @Ftfuncdecision@@GetPackageInfoTable$qqrv @Ftfuncdecision@@PackageLoad$qqrv @Ftfuncdecision@@PackageUnload$qqrv @Ftfuncdecision@initialization$qqrv @GetPackageInfoTable @Uftfuncdecision@Finalization$qqrv @Uftfuncdecision@TFTFunc300001@ @Uftfuncdecision@TFTFunc300001@$bctr$qqrv @Uftfuncdecision@TFTFunc300001@$bdtr$qqrv @Uftfuncdecision@TFTFunc300001@ExecWithRO$qqrv @Uftfuncdecision@TFTFunc300001@GetErrorMsg$qqr20System@UnicodeString @Uftfuncdecision@TFTFunc300001@GetProcParams$qqrv @Uftfuncdecision@TFTFunc300001@ParseOutParam$qqr48System@%DynamicArray$t23Udataaccess@TParamField% @Uftfuncdecision@TFTFunc300001@QuickAssign$qqrip25Uftdataset@TFTReadDataSet @Uftfuncdecision@TFTOpenResult300001@ @Uftfuncdecision@TFTOpenResult300001@$bctr$qqrv @Uftfuncdecision@TFTOpenResult300001@$bdtr$qqrv @Uftfuncdecision@TFTOpenResult300001@Assign$qqrp19Classes@TPersistent @Uftfuncdecision@TFTOpenResult300001@LoadData$qqrp25Uftdataset@TFTReadDataSet @Uftfuncdecision@initialization$qqrv @Uftinterinfodecision@Finalization$qqrv @Uftinterinfodecision@TFTDecisionBplInfo@ @Uftinterinfodecision@TFTDecisionBplInfo@GetFTInterInfos$qqrv @Uftinterinfodecision@TFTDecisionBplInfo@GetFTTableInfos$qqrv @Uftinterinfodecision@TFTInterInfo300001@ @Uftinterinfodecision@TFTInterInfo300001@FuncCaption$qqrv @Uftinterinfodecision@TFTInterInfo300001@GetFTFieldInfos$qqrv @Uftinterinfodecision@TFTInterInfo300001@KeyFieldName$qqrv @Uftinterinfodecision@TFTInterInfo300001@MasterFieldName$qqrv @Uftinterinfodecision@TFTInterInfo300001@NewKeyFieldName$qqrv @Uftinterinfodecision@TFTInterInfo300002@ @Uftinterinfodecision@TFTInterInfo300002@FuncCaption$qqrv @Uftinterinfodecision@TFTInterInfo300002@GetFTFieldInfos$qqrv @Uftinterinfodecision@TFTInterInfo300002@KeyFieldName$qqrv @Uftinterinfodecision@TFTInterInfo300002@MasterFieldName$qqrv @Uftinterinfodecision@TFTInterInfo300002@NewKeyFieldName$qqrv @Uftinterinfodecision@TFTTableInfoDay_Info@ @Uftinterinfodecision@TFTTableInfoDay_Info@GetFTFieldInfos$qqrv @Uftinterinfodecision@TFTTableInfoDay_Info@TableCaption$qqrv @Uftinterinfodecision@TFTTableInfoDay_Info@TableName$qqrv @Uftinterinfodecision@TFTTableInfoSTATREPORT@ @Uftinterinfodecision@TFTTableInfoSTATREPORT@GetFTFieldInfos$qqrv @Uftinterinfodecision@TFTTableInfoSTATREPORT@TableCaption$qqrv @Uftinterinfodecision@TFTTableInfoSTATREPORT@TableName$qqrv @Uftinterinfodecision@initialization$qqrv @Uftquerydecision@Finalization$qqrv @Uftquerydecision@TFTOpenResult300002@ @Uftquerydecision@TFTOpenResult300002@$bctr$qqrv @Uftquerydecision@TFTOpenResult300002@$bdtr$qqrv @Uftquerydecision@TFTOpenResult300002@Assign$qqrp19Classes@TPersistent @Uftquerydecision@TFTOpenResult300002@LoadData$qqrp25Uftdataset@TFTReadDataSet @Uftquerydecision@TFTQuery300002@ @Uftquerydecision@TFTQuery300002@$bctr$qqrv @Uftquerydecision@TFTQuery300002@$bdtr$qqrv @Uftquerydecision@TFTQuery300002@ClearValues$qqrv @Uftquerydecision@initialization$qqrv Finalize Initialize

Name

.text

Size

5KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.itext

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

c04668ac868f6acb1ffede91ca6f7c3513f943d6674bd483acc51c671f88b926

generic