Behavioral task
behavioral1
Sample
f811d1bca3e6b565760aa58a48a92ce31f7c0cf0498f62a6c6ea8eda0b8e9ef3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f811d1bca3e6b565760aa58a48a92ce31f7c0cf0498f62a6c6ea8eda0b8e9ef3.dll
Resource
win10v2004-20220812-en
General
-
Target
f811d1bca3e6b565760aa58a48a92ce31f7c0cf0498f62a6c6ea8eda0b8e9ef3
-
Size
1.5MB
-
MD5
200b13b0e78d8f7db08db59d70a80ce0
-
SHA1
7f22484d2979070931fc7e9f929e4d10983d23b1
-
SHA256
f811d1bca3e6b565760aa58a48a92ce31f7c0cf0498f62a6c6ea8eda0b8e9ef3
-
SHA512
7110404f866869d246fc090ae77a5e846ffcf21a199a2f32f2e733b0d33bc3fd54ea90ce30588ec5c5684ed1a852490f6d9b8614fdca2450925927396b6d139d
-
SSDEEP
24576:J/3IXl9EA71ouGxy/bBeFNkc081Nf9GkQoIh3bvlrMawsFlbd425X6B0gy1MTt3y:JvI1W6uuey/bBeFacp1NlGeIh3bpM1sF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f811d1bca3e6b565760aa58a48a92ce31f7c0cf0498f62a6c6ea8eda0b8e9ef3.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 258KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 29KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE