df56fbb96ec78a375fecfc6fa404c502d381be997180b484fba1b89b05515c19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df56fbb96ec78a375fecfc6fa404c502d381be997180b484fba1b89b05515c19
Size

200KB
MD5

d7ed17b1347fa24fbdef140033a0a910
SHA1

d048ecbd8195d04e8f49926f3fa1609797761394
SHA256

df56fbb96ec78a375fecfc6fa404c502d381be997180b484fba1b89b05515c19
SHA512

56e374b5df987fb3f61d994f8776252f2db39064253410475e2497626f9a03df94cd5886abcc4b7348f296d1fa6d9a362f9ec438b6b232871ed2a36c3054649a
SSDEEP

3072:x19UNAASCrCNlO6//w1fAuyMMb2jZxP1N22oPFCN1/x55TepVDQxiPdyd7:HSNrzN5fX8sTf22hpnyM7

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df56fbb96ec78a375fecfc6fa404c502d381be997180b484fba1b89b05515c19

Files

df56fbb96ec78a375fecfc6fa404c502d381be997180b484fba1b89b05515c19
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

OpenDlg
SetDlgPos
ShowDlgHide

Sections

.text
Size: 105KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE