57eeb5ed62a0ecf6eeb0782bf715ea21e987cf8d0a67fb3e9a5d3f2b3536a22b

Sharing

Copy URL Twitter E-mail

General

Target
57eeb5ed62a0ecf6eeb0782bf715ea21e987cf8d0a67fb3e9a5d3f2b3536a22b
Size 11.8MB
Sample261002-qt62cszzcs
SHA256 57eeb5ed62a0ecf6eeb0782bf715ea21e987cf8d0a67fb3e9a5d3f2b3536a22b
MD5 08ac4a966616e99329f9cc3cabb11810
SHA1 f564003779c44243406aad40add3c8ae089452b9
SHA512 189e64d189d41b1f567883bcf39c8775ee6b8e6cf8842d22269d20b16ade2d7a20d4ac4495053043072e2893f6ed4a33c8e50602c9152cb38683c3f6391e0a7c
SSDEEP 196608:mxi6vHMLlLHUsiIWPHA/aRetdiQOCtSdkibZR4kj+Q1bpXflpXHXMUN:mDvUlwpIWPHtR6d5UuqjxbpXfH3XMW
TLSH
T1AEC6337CA803FA21D18AD4EE4A67F3AA6717D9DD6A02C032C511991071C7BF7836CB5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/TengriLIS.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TengriLIS.exe

File Explorer

57eeb5ed62a0ecf6eeb0782bf715ea21e987cf8d0a67fb3e9a5d3f2b3536a22b

.zip 11.8MB
TengriLIS.exe

.exe 11.9MB

57eeb5ed62a0ecf6eeb0782bf715ea21e987cf8d0a67fb3e9a5d3f2b3536a22b

SHA256 57eeb5ed62a0ecf6eeb0782bf715ea21e987cf8d0a67fb3e9a5d3f2b3536a22b
MD5 08ac4a966616e99329f9cc3cabb11810
SHA1 f564003779c44243406aad40add3c8ae089452b9
SHA512 189e64d189d41b1f567883bcf39c8775ee6b8e6cf8842d22269d20b16ade2d7a20d4ac4495053043072e2893f6ed4a33c8e50602c9152cb38683c3f6391e0a7c
SSDEEP 196608:mxi6vHMLlLHUsiIWPHA/aRetdiQOCtSdkibZR4kj+Q1bpXflpXHXMUN:mDvUlwpIWPHtR6d5UuqjxbpXfH3XMW
TLSH
T1AEC6337CA803FA21D18AD4EE4A67F3AA6717D9DD6A02C032C511991071C7BF7836CB5B
MD5 SHA1 SHA512 SSDEEP TLSH

TengriLIS.exe

SHA256 423e03fe18ca86b15852fb8b9dfd734f6d389fac1886b9b65a195ee0c565ed57
MD5 3f9097e3078add7881c697409de58a64
SHA1 b4a07e36887ce5e9fbb37daef1ada1a998a615e4
SHA512 4980b79cabf83343f4e3571c31573fd5944701d02393b58e6029c6b080519be38b3848eb91fe196ad6a61925ed3e68d4a915ddbcbf0eee57d652460afa20b2f3
SSDEEP 196608:QSq60utZ7EWSOY2MyeCXvGeM1uE/NZBKGr1hEcH+c2bPYt1XN:QWnTEj2MyeLP1j1ZQiH92TQ1X
TLSH
T1E6C63359E9DFE203F145F8FC2F96E36DFB97ADB91202413700D1784AA6F28514A14BB2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51052545

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

6.0MB

Virtual Size

22.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.itext

Size

55KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

134KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

463KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

6KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5.7MB

Virtual Size

22.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

23KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

57eeb5ed62a0ecf6eeb0782bf715ea21e987cf8d0a67fb3e9a5d3f2b3536a22b

TengriLIS.exe

generic