ServiceMain
Behavioral task
behavioral1
Sample
fdba7332415d9d1fec7791a5bb87fcf7b49fcd093a87677f5faaca50ce502ab9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fdba7332415d9d1fec7791a5bb87fcf7b49fcd093a87677f5faaca50ce502ab9.dll
Resource
win10v2004-20220812-en
General
-
Target
fdba7332415d9d1fec7791a5bb87fcf7b49fcd093a87677f5faaca50ce502ab9
-
Size
1.1MB
-
MD5
71ef738d1b7dabdab50f183edadf325f
-
SHA1
092102d2cbaf120bd64286297b5c22d8ef7fbeba
-
SHA256
fdba7332415d9d1fec7791a5bb87fcf7b49fcd093a87677f5faaca50ce502ab9
-
SHA512
877ed4ffea6e0d07b56156de7b9a92e4522c4ecd20a913379977c837fd73ed4659a0e946e0745d3df4446e4b73858b2b6cdb1579a1bd331414f1c8f78d2e4b0f
-
SSDEEP
24576:COGa7mVbFVIk8c7PBaAsLCrN4tCtWfnDRveFWTzxyx7ObvD2Zg:COGMa5+VoBbsQNIC0VLzxk7ObqZg
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fdba7332415d9d1fec7791a5bb87fcf7b49fcd093a87677f5faaca50ce502ab9.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 950KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 81KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE