Behavioral task
behavioral1
Sample
f1b8e14751aab196a436777fd54a3c94690e7d8280659729908812875b88003c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1b8e14751aab196a436777fd54a3c94690e7d8280659729908812875b88003c.dll
Resource
win10v2004-20221111-en
General
-
Target
f1b8e14751aab196a436777fd54a3c94690e7d8280659729908812875b88003c
-
Size
39KB
-
MD5
22308ce5a60e021a2bdec537f254ab20
-
SHA1
2c22b15e68fe6b2a9463c2d6497d0934639a2009
-
SHA256
f1b8e14751aab196a436777fd54a3c94690e7d8280659729908812875b88003c
-
SHA512
272b03d1c653a7949b67a44c8d56a78011ed0c28e864e19079b2b12e96b3bda154cf2f2b929b6b9addc06f7417214ad62f04b077e2b06712cbccad9a2b318340
-
SSDEEP
768:15LtR2Hxh4qIzKhliuQgdKSRke5e4vZbw6FA7HAO65b/WoG3x0bPr7e:1PRRqPlX/m4vZbwCkHAp5b/Wo1+
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f1b8e14751aab196a436777fd54a3c94690e7d8280659729908812875b88003c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcode Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�6�t sec Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE