ShowDllForm
Behavioral task
behavioral1
Sample
dd4f77e8e7ec69c65c9a9f979b5dc4393bdf1540b071b219ee8b6ff6c348d5c3.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd4f77e8e7ec69c65c9a9f979b5dc4393bdf1540b071b219ee8b6ff6c348d5c3.dll
Resource
win10v2004-20220812-en
General
-
Target
dd4f77e8e7ec69c65c9a9f979b5dc4393bdf1540b071b219ee8b6ff6c348d5c3
-
Size
3.3MB
-
MD5
543c1a9b348057ac89a6e63b9f60e628
-
SHA1
59f7b88e4c26fe53ca77cf2cdfaaa24f7e4c1886
-
SHA256
dd4f77e8e7ec69c65c9a9f979b5dc4393bdf1540b071b219ee8b6ff6c348d5c3
-
SHA512
ca80d55fe35fb31408c4059cf58fdba777a0045558798db7da6d7f56d8ea89a5e1a91755ab9335c864091f1db89b28aa0c8da1dd09f082b39b758ef91aa597bc
-
SSDEEP
98304:oiygb2I+8dxM9eUG7m5hCJyQ1j7KRSn4k:nyADpM9G7m5hqyQdGRSx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
dd4f77e8e7ec69c65c9a9f979b5dc4393bdf1540b071b219ee8b6ff6c348d5c3.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 2.6MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 38KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 223KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 416KB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE