CreateInterface
Behavioral task
behavioral1
Sample
70e4e9159bc108c4312d1659cf420927ea3920a64e16da41655ad14e756a2ebb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70e4e9159bc108c4312d1659cf420927ea3920a64e16da41655ad14e756a2ebb.dll
Resource
win10v2004-20221111-en
General
-
Target
70e4e9159bc108c4312d1659cf420927ea3920a64e16da41655ad14e756a2ebb
-
Size
1.4MB
-
MD5
0ad0a6bc14e11377b43be19ae1309b96
-
SHA1
9ed6f579b317510c3a194392bee8e56374677eac
-
SHA256
70e4e9159bc108c4312d1659cf420927ea3920a64e16da41655ad14e756a2ebb
-
SHA512
1f92fcd4559b958b9be67ca7dafa2824a30f77d1a44419f640c0050e2ad3637a4f44c3cd95bc9ed2c413b8540df71f6cd4bdfdd2e5e0b472841939c3e4c13fb7
-
SSDEEP
3072:BLeInxrIO3nyRs/dLhkQoml8pL9ua2gUl7spkk6N5IG/NHb:BHrIaB/j3E9uabUl7s1q5HNHb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
70e4e9159bc108c4312d1659cf420927ea3920a64e16da41655ad14e756a2ebb.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.nsp0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE