LastMsgBoxInfo_HookAllApps
Behavioral task
behavioral1
Sample
e18d7116fe3953c47df7148f444f53270db2eac8ea06b77d8ac29fa751a6d451.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e18d7116fe3953c47df7148f444f53270db2eac8ea06b77d8ac29fa751a6d451.dll
Resource
win10v2004-20221111-en
General
-
Target
e18d7116fe3953c47df7148f444f53270db2eac8ea06b77d8ac29fa751a6d451
-
Size
343KB
-
MD5
d56273e4746166acd914b7c9dbb793ab
-
SHA1
244afb86d387404486fc73a70de8465fac1dc4b1
-
SHA256
e18d7116fe3953c47df7148f444f53270db2eac8ea06b77d8ac29fa751a6d451
-
SHA512
46fb109c16b40a886777f79a17aac9ba22aca4b72f873940b543db393aaeccc26eb89f921c74add560748302d2befe9a40d642cc348c4b05fd73d9a908f60f31
-
SSDEEP
6144:X4O1Uzw4bATNhMF7NVwI//rw/XWRid57mIbosm4hkNEckL/wG:X48IwmMvMFpKIyXWRidMIbdh3/J
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
e18d7116fe3953c47df7148f444f53270db2eac8ea06b77d8ac29fa751a6d451.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 327KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE