dfe9464d167ab6e4a855e29c731a923f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfe9464d167ab6e4a855e29c731a923f
Size

24KB
MD5

dfe9464d167ab6e4a855e29c731a923f
SHA1

17073a08c879ab79a7733bd3830ebd241fbedc73
SHA256

9973b36da853b43b48f00b2e87df5b66a57a7cf446233c4c8f408495311f574b
SHA512

7780df86aa4de387ea268d67fd219567a589704cf1f12e0a19e76c678a9b97ef727a77642fa32c41781272ac27d83dfdfbd5ffe0f35124d1fb4bd51fc8109ffc
SSDEEP

384:26p2+glACeujby1RNYbxWytrImEuXpfPQwNPZ9tQKxJLbxqbskw6GGAxcr6+09Pj:/dDL14ptrLXpnrNPZ8KlqTw6Gxxrv7f

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfe9464d167ab6e4a855e29c731a923f

Files

dfe9464d167ab6e4a855e29c731a923f
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aasd13
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE