ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646

Sharing

Copy URL Twitter E-mail

General

Target
ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646
Size 178KB
Sample260918-efcd2shp3s
SHA256 ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646
MD5 4ff0523058adb7e4a215a24f4751f4c2
SHA1 552fda7fed26dce2dde6af2debf714db359fa22e
SHA512 a984864f23a5524df5bebbb638e0b3c2a5a962646637605054ce1e679a1503e7d98719001cd24f906cc9021b0b3b7cd10a8daa4c51c8a1f8740f5657d391100e
SSDEEP 3072:+Yubs4vIPfIOKyCRfyJiJJMXybJg30TZZ+MbpqdNjfBDckH8sbigzwQj1m:Puk6fK6tixMbwNL+kDrA
TLSH
T18C04120F8650C8D7D55BB8776BBAB27A8DA40254D713B60A9AC6AF5F45F9D03C40C20F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646

File Explorer

ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646

.exe 178KB

ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646

SHA256 ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646
MD5 4ff0523058adb7e4a215a24f4751f4c2
SHA1 552fda7fed26dce2dde6af2debf714db359fa22e
SHA512 a984864f23a5524df5bebbb638e0b3c2a5a962646637605054ce1e679a1503e7d98719001cd24f906cc9021b0b3b7cd10a8daa4c51c8a1f8740f5657d391100e
SSDEEP 3072:+Yubs4vIPfIOKyCRfyJiJJMXybJg30TZZ+MbpqdNjfBDckH8sbigzwQj1m:Puk6fK6tixMbwNL+kDrA
TLSH
T18C04120F8650C8D7D55BB8776BBAB27A8DA40254D713B60A9AC6AF5F45F9D03C40C20F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

372737

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

512B

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

165KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata4

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata3

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata2

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

ac1d64cf0f0327d970b772a51a6d7350d03ed67e2ea841f9df5cf539328fd646

generic