Behavioral task
behavioral1
Sample
99cec535c0dffa6f19426c23196f0c3859a2587af530eede23e8b5b6d5cd846e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99cec535c0dffa6f19426c23196f0c3859a2587af530eede23e8b5b6d5cd846e.dll
Resource
win10v2004-20220812-en
General
-
Target
99cec535c0dffa6f19426c23196f0c3859a2587af530eede23e8b5b6d5cd846e
-
Size
1.1MB
-
MD5
a8bf88a2b3064a5008a800b195ca6223
-
SHA1
7ded353065bf834c80288e6d888de74c947739f9
-
SHA256
99cec535c0dffa6f19426c23196f0c3859a2587af530eede23e8b5b6d5cd846e
-
SHA512
683889f7eb450cac659c78a605040da4bb6165d8646731aae083f2dd906600a967487da08440a7635b383fec4f50d9269c256a8ee363878252895856b6fc96b2
-
SSDEEP
3072:McEjLuF8qYlJ0PYbMEL4pUrcvFoVJin7pVZ:McGuFN8L664J
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
99cec535c0dffa6f19426c23196f0c3859a2587af530eede23e8b5b6d5cd846e.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE