CreateGamingProcess
Behavioral task
behavioral1
Sample
17fb5b16699063f5ffdfb51de0a8cce6883696cad284ce8a8177d9ff4b50ee58.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
17fb5b16699063f5ffdfb51de0a8cce6883696cad284ce8a8177d9ff4b50ee58.dll
Resource
win10v2004-20220901-en
General
-
Target
17fb5b16699063f5ffdfb51de0a8cce6883696cad284ce8a8177d9ff4b50ee58
-
Size
244KB
-
MD5
44419b4dbd367d8cc558e0f40ecc873c
-
SHA1
6e6d11af130eae524236ad79fde77755be7ca06f
-
SHA256
17fb5b16699063f5ffdfb51de0a8cce6883696cad284ce8a8177d9ff4b50ee58
-
SHA512
7fe0d292ee66e6052d4578ef54ccb77cb110c1abb2ca5bb2fd7e48f565d793bc79024723d22d6089d7a124841ff7788f3c5de75ca67b99c9f35b7f9e3e9d1b62
-
SSDEEP
6144:/hxb9xGMFUMK4wBgFb1TLdVkX4CMU2mOMwVvddoM:5xBxGFMvwmb1TLnkrMUIMw3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
17fb5b16699063f5ffdfb51de0a8cce6883696cad284ce8a8177d9ff4b50ee58.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 15KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE