General

  • Target

    bda4aa7023683e46a2ae3e268e9d05e7

  • Size

    1.3MB

  • MD5

    bda4aa7023683e46a2ae3e268e9d05e7

  • SHA1

    5909d267a796a9c718d0c79dc489adffb94480cf

  • SHA256

    1e4632fb6bb3a1165926c9bff2c29892c7bb64f9105092d38cdf8e5daacd59a6

  • SHA512

    8048bd3aff4a441cf4dbe63028da9466898390d984659b711df4457bb225d4e73b7fb9f4a8e39f6a39951eaa125e6211375d774179dcad1aa1b493610d946603

  • SSDEEP

    24576:Tlu/I8+VcQCWR06FYxDX9ADrTtnZCsx0SR3kh6VlzaQHYw4el2JnaHtNEGhQiH9j:U/I85s0RtAD9nreSReclxHmel2JnCEGh

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • bda4aa7023683e46a2ae3e268e9d05e7
    .rar
  • PEnterpriseBPL/Delphi5/CodeEight.dcu
  • PEnterpriseBPL/Delphi5/CodeFantasy.dcu
  • PEnterpriseBPL/Delphi5/CodeFantasyForD5.bpl
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEnterpriseBPL/Delphi5/CodeFantasyForD5.dcp
  • PEnterpriseBPL/Delphi5/CodeFive.dcu
  • PEnterpriseBPL/Delphi5/CodeFour.dcu
  • PEnterpriseBPL/Delphi5/CodeNine.dcu
  • PEnterpriseBPL/Delphi5/CodeOne.dcu
  • PEnterpriseBPL/Delphi5/CodeSeven.dcu
  • PEnterpriseBPL/Delphi5/CodeSix.dcu
  • PEnterpriseBPL/Delphi5/CodeTen.dcu
  • PEnterpriseBPL/Delphi5/CodeThree.dcu
  • PEnterpriseBPL/Delphi5/CodeTwo.dcu
  • PEnterpriseBPL/Delphi5/Codeeighteen.dcu
  • PEnterpriseBPL/Delphi5/Codefifteen.dcu
  • PEnterpriseBPL/Delphi5/Codefourteen.dcu
  • PEnterpriseBPL/Delphi5/Codeseventeen.dcu
  • PEnterpriseBPL/Delphi5/Codesixteen.dcu
  • PEnterpriseBPL/Delphi5/Codethirteen.dcu
  • PEnterpriseBPL/Delphi5/Codetwelve.dcu
  • PEnterpriseBPL/Delphi5/Compress.dcu
  • PEnterpriseBPL/Delphi5/ConstInfo.dcu
  • PEnterpriseBPL/Delphi6/CodeEight.dcu
  • PEnterpriseBPL/Delphi6/CodeFantasy.dcu
  • PEnterpriseBPL/Delphi6/CodeFantasyForD6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEnterpriseBPL/Delphi6/CodeFantasyForD6.dcp
  • PEnterpriseBPL/Delphi6/CodeFive.dcu
  • PEnterpriseBPL/Delphi6/CodeFour.dcu
  • PEnterpriseBPL/Delphi6/CodeNine.dcu
  • PEnterpriseBPL/Delphi6/CodeOne.dcu
  • PEnterpriseBPL/Delphi6/CodeSeven.dcu
  • PEnterpriseBPL/Delphi6/CodeSix.dcu
  • PEnterpriseBPL/Delphi6/CodeTen.dcu
  • PEnterpriseBPL/Delphi6/CodeThree.dcu
  • PEnterpriseBPL/Delphi6/CodeTwo.dcu
  • PEnterpriseBPL/Delphi6/Codeeighteen.dcu
  • PEnterpriseBPL/Delphi6/Codefifteen.dcu
  • PEnterpriseBPL/Delphi6/Codefourteen.dcu
  • PEnterpriseBPL/Delphi6/Codeseventeen.dcu
  • PEnterpriseBPL/Delphi6/Codesixteen.dcu
  • PEnterpriseBPL/Delphi6/Codethirteen.dcu
  • PEnterpriseBPL/Delphi6/Codetwelve.dcu
  • PEnterpriseBPL/Delphi6/Compress.dcu
  • PEnterpriseBPL/Delphi6/ConstInfo.dcu
  • PEnterpriseBPL/Delphi7/CodeEight.dcu
  • PEnterpriseBPL/Delphi7/CodeFantasy.dcu
  • PEnterpriseBPL/Delphi7/CodeFantasyForD7.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PEnterpriseBPL/Delphi7/CodeFantasyForD7.dcp
  • PEnterpriseBPL/Delphi7/CodeFive.dcu
  • PEnterpriseBPL/Delphi7/CodeFour.dcu
  • PEnterpriseBPL/Delphi7/CodeNine.dcu
  • PEnterpriseBPL/Delphi7/CodeOne.dcu
  • PEnterpriseBPL/Delphi7/CodeSeven.dcu
  • PEnterpriseBPL/Delphi7/CodeSix.dcu
  • PEnterpriseBPL/Delphi7/CodeTen.dcu
  • PEnterpriseBPL/Delphi7/CodeThree.dcu
  • PEnterpriseBPL/Delphi7/CodeTwo.dcu
  • PEnterpriseBPL/Delphi7/Codeeighteen.dcu
  • PEnterpriseBPL/Delphi7/Codefifteen.dcu
  • PEnterpriseBPL/Delphi7/Codefourteen.dcu
  • PEnterpriseBPL/Delphi7/Codeseventeen.dcu
  • PEnterpriseBPL/Delphi7/Codesixteen.dcu
  • PEnterpriseBPL/Delphi7/Codethirteen.dcu
  • PEnterpriseBPL/Delphi7/Codetwelve.dcu
  • PEnterpriseBPL/Delphi7/Compress.dcu
  • PEnterpriseBPL/Delphi7/ConstInfo.dcu
  • PEnterpriseBPL/Demos/文件加密/FileEncrypt.cfg
  • PEnterpriseBPL/Demos/文件加密/FileEncrypt.dof
  • PEnterpriseBPL/Demos/文件加密/FileEncrypt.dpr
  • PEnterpriseBPL/Demos/文件加密/FileEncrypt.res
  • PEnterpriseBPL/Demos/文件加密/FileEncrypt.~dpr
  • PEnterpriseBPL/Demos/文件加密/InterfaceUnit.dcu
  • PEnterpriseBPL/Demos/文件加密/InterfaceUnit.pas
  • PEnterpriseBPL/Demos/文件加密/InterfaceUnit.~pas
  • PEnterpriseBPL/Demos/文件加密/Main.dcu
  • PEnterpriseBPL/Demos/文件加密/Main.ddp
  • PEnterpriseBPL/Demos/文件加密/Main.dfm
  • PEnterpriseBPL/Demos/文件加密/Main.pas
  • PEnterpriseBPL/Demos/文件加密/Main.~ddp
  • PEnterpriseBPL/Demos/文件加密/Main.~dfm
  • PEnterpriseBPL/Demos/文件加密/Main.~pas
  • PEnterpriseBPL/Demos/文件压缩加密/FilePack.cfg
  • PEnterpriseBPL/Demos/文件压缩加密/FilePack.dof
  • PEnterpriseBPL/Demos/文件压缩加密/FilePack.dpr
  • PEnterpriseBPL/Demos/文件压缩加密/FilePack.res
  • PEnterpriseBPL/Demos/文件压缩加密/Main.dcu
  • PEnterpriseBPL/Demos/文件压缩加密/Main.ddp
  • PEnterpriseBPL/Demos/文件压缩加密/Main.dfm
  • PEnterpriseBPL/Demos/文件压缩加密/Main.pas
  • PEnterpriseBPL/Demos/文件压缩加密/Main.~ddp
  • PEnterpriseBPL/Demos/文件压缩加密/Main.~dfm
  • PEnterpriseBPL/Demos/文件压缩加密/Main.~pas
  • PEnterpriseBPL/Demos/文件的Hash值/Filehash.cfg
  • PEnterpriseBPL/Demos/文件的Hash值/Filehash.dof
  • PEnterpriseBPL/Demos/文件的Hash值/Filehash.dpr
  • PEnterpriseBPL/Demos/文件的Hash值/Filehash.res
  • PEnterpriseBPL/Demos/文件的Hash值/Filehash.~dpr
  • PEnterpriseBPL/Demos/文件的Hash值/InterfaceUnit.dcu
  • PEnterpriseBPL/Demos/文件的Hash值/InterfaceUnit.pas
  • PEnterpriseBPL/Demos/文件的Hash值/InterfaceUnit.~pas
  • PEnterpriseBPL/Demos/文件的Hash值/Main.dcu
  • PEnterpriseBPL/Demos/文件的Hash值/Main.ddp
  • PEnterpriseBPL/Demos/文件的Hash值/Main.dfm
  • PEnterpriseBPL/Demos/文件的Hash值/Main.pas
  • PEnterpriseBPL/Demos/文件的Hash值/Main.~ddp
  • PEnterpriseBPL/Demos/文件的Hash值/Main.~dfm
  • PEnterpriseBPL/Demos/文件的Hash值/Main.~pas
  • PEnterpriseBPL/Demos/注册机示例/DllKeyGen.cfg
  • PEnterpriseBPL/Demos/注册机示例/DllKeyGen.dof
  • PEnterpriseBPL/Demos/注册机示例/DllKeyGen.dpr
  • PEnterpriseBPL/Demos/注册机示例/DllKeyGen.res
  • PEnterpriseBPL/Demos/注册机示例/DllKeyGen.~dpr
  • PEnterpriseBPL/Demos/注册机示例/InterfaceUnit.dcu
  • PEnterpriseBPL/Demos/注册机示例/InterfaceUnit.pas
  • PEnterpriseBPL/Demos/注册机示例/main.dcu
  • PEnterpriseBPL/Demos/注册机示例/main.ddp
  • PEnterpriseBPL/Demos/注册机示例/main.dfm
  • PEnterpriseBPL/Demos/注册机示例/main.pas
  • PEnterpriseBPL/Demos/注册机示例/main.~ddp
  • PEnterpriseBPL/Demos/注册机示例/main.~dfm
  • PEnterpriseBPL/Demos/注册机示例/main.~pas
  • PEnterpriseBPL/Demos/软件加密示例/DllDemo.cfg
  • PEnterpriseBPL/Demos/软件加密示例/DllDemo.dof
  • PEnterpriseBPL/Demos/软件加密示例/DllDemo.dpr
  • PEnterpriseBPL/Demos/软件加密示例/DllDemo.res
  • PEnterpriseBPL/Demos/软件加密示例/DllDemo.~dpr
  • PEnterpriseBPL/Demos/软件加密示例/InterfaceUnit.dcu
  • PEnterpriseBPL/Demos/软件加密示例/InterfaceUnit.pas
  • PEnterpriseBPL/Demos/软件加密示例/InterfaceUnit.~pas
  • PEnterpriseBPL/Demos/软件加密示例/Main.dcu
  • PEnterpriseBPL/Demos/软件加密示例/Main.ddp
  • PEnterpriseBPL/Demos/软件加密示例/Main.dfm
  • PEnterpriseBPL/Demos/软件加密示例/Main.pas
  • PEnterpriseBPL/Demos/软件加密示例/Main.~ddp
  • PEnterpriseBPL/Demos/软件加密示例/Main.~dfm
  • PEnterpriseBPL/Demos/软件加密示例/Main.~pas
  • PEnterpriseBPL/RSATool/RSATool.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PEnterpriseBPL/help/HELP.CHM
    .chm
  • PEnterpriseBPL/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot