Golddes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Golddes.dll
Size

23KB
MD5

8903dc572637c13faf4ca87e58fa7847
SHA1

e3bca21ff0736e77ddaf0cbad7eeab5dba1d58ba
SHA256

8f63e712c4370a327c40ed711f4f2cab69ecd0d7bc878ed9fb549113bdd91c8e
SHA512

c32c502d567d044dc60cc3eda038d643c129222fa5ee884c0df91b4a40525769c98f39c465cc91da83e3c38381d41d9b5a6dd52c268f52f5b22dbf0a056c8093
SSDEEP

384:+cweebzew3fb0yIjcLgNCREdKEJNaow/QIi6fHGTo912ACthHjwLGmAxpr6+09PB:+XXLENaow4Ii6fmTo91ODjwLGRxkv7f1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Golddes.dll

Files

Golddes.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AscToBcd
AscToBin
BcdToAsc
BcdToBin
BinToAsc
BinToBcd
CRC_16
CRC_8
CRC_CCITT
Cal_LRC
Cal_XOR
DES
DES3
SwapBytes
_DES
_DES3

Sections

.text
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE