30351daa048c0a5836ebb27b880ce019 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30351daa048c0a5836ebb27b880ce019
Size

24KB
MD5

30351daa048c0a5836ebb27b880ce019
SHA1

fac546cf0c41c75e5c46324bc35c5e2b619adf01
SHA256

272f375a1aa80f4ecc5f89e40feabca233dfbdff624d69279e60075c8a8e39f8
SHA512

4848bf4904f79ad59e1aa3de2bbdc0b2fe5d63a448712c8cee6a176ecd50a4cc49c054d76a022a0c21aadbcec5b119140247c097cb6dff3870b040ec8815cd56
SSDEEP

384:S6p2+glACeujby1RNYbxWytrCRY9QJZ9tQKxJLbxqbskw6GGAxcr6+09PfL3v:TdDL14ptrc+QJZ8KlqTw6Gxxrv7f

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30351daa048c0a5836ebb27b880ce019

Files

30351daa048c0a5836ebb27b880ce019
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aasd13
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE