My_ini
Behavioral task
behavioral1
Sample
fa8a51450e35e785472befb8c3e4808c2ba4016d6bd435909c0a121868606a7b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa8a51450e35e785472befb8c3e4808c2ba4016d6bd435909c0a121868606a7b.dll
Resource
win10v2004-20220812-en
General
-
Target
fa8a51450e35e785472befb8c3e4808c2ba4016d6bd435909c0a121868606a7b
-
Size
293KB
-
MD5
052aae57fbc859ea3efe31a51f63ea90
-
SHA1
43a5f089d05b6f73efc9b9e580bcab898220cf62
-
SHA256
fa8a51450e35e785472befb8c3e4808c2ba4016d6bd435909c0a121868606a7b
-
SHA512
f49c4bf52fae2541eec204a58839a5e9012261a8208cf14c060c7efbb54f2124753a67aadd3711bf515dc0e985f5ec1879df50e252db5e4e4de6c23518dc2dc5
-
SSDEEP
6144:bXztUh19gGaO4HCEfBmqO/JO9YZzovGSkGBOEy1zqAH/:lyOiWBmTkyBS61nH/
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fa8a51450e35e785472befb8c3e4808c2ba4016d6bd435909c0a121868606a7b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 79KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE