_�����ӳ���
Behavioral task
behavioral1
Sample
ecd12369a94ba419ece5cd90988c62bf36d1797813cc5c1cf511e9b89b44a4ef.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecd12369a94ba419ece5cd90988c62bf36d1797813cc5c1cf511e9b89b44a4ef.dll
Resource
win10v2004-20221111-en
General
-
Target
ecd12369a94ba419ece5cd90988c62bf36d1797813cc5c1cf511e9b89b44a4ef
-
Size
334KB
-
MD5
ea35e7bb2a55f72f79677c4efbdd8dbb
-
SHA1
1dbc54bb85422a113edc337a6fe918991033713a
-
SHA256
ecd12369a94ba419ece5cd90988c62bf36d1797813cc5c1cf511e9b89b44a4ef
-
SHA512
38aac04cef2e10928fcc6ea76d05650b0532cfeebde9547245659c0a6e6635703f32ae541e6e6f44319e8698ad9463500480e63fe807e778ba23714b774627d9
-
SSDEEP
6144:x3zXs7y67Odj+0dVZ0yuz6Bq45b9+KDQh2TVsHthAl9r14kyPj+IkFRJ:S266dNVZoSHh+K1TVstC
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ecd12369a94ba419ece5cd90988c62bf36d1797813cc5c1cf511e9b89b44a4ef.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 211KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE