Init
Behavioral task
behavioral1
Sample
8ea4ce43273bb99c012f0aef0b071dc72e80da64dc999a543410861b03995d01.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ea4ce43273bb99c012f0aef0b071dc72e80da64dc999a543410861b03995d01.dll
Resource
win10v2004-20220812-en
General
-
Target
8ea4ce43273bb99c012f0aef0b071dc72e80da64dc999a543410861b03995d01
-
Size
1.7MB
-
MD5
7b3621b2a1a850425e3544e1c4fdb572
-
SHA1
a1260b298bcc3f28f02638d728b1d5c340206145
-
SHA256
8ea4ce43273bb99c012f0aef0b071dc72e80da64dc999a543410861b03995d01
-
SHA512
50fa3a1c8ff14ef202161c77830b3dfe2581f5a42daa1143fe9353ef424ecb93059022fab5e0b40391cdaa481a881992acb302c287e0b01b31300ae89b4d4d73
-
SSDEEP
49152:/NnX+yxAGbQ5bFcJxigZbFsKqroH+/TH70B4:lAgx5sproeLH70B
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
8ea4ce43273bb99c012f0aef0b071dc72e80da64dc999a543410861b03995d01.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 449KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 107KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 613KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 306KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: 294B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE