Behavioral task
behavioral1
Sample
871d418d064e93fc7c0d6e6a6446a701576d4174046c7aaf387671efe95e2bc9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
871d418d064e93fc7c0d6e6a6446a701576d4174046c7aaf387671efe95e2bc9.dll
Resource
win10v2004-20220901-en
General
-
Target
871d418d064e93fc7c0d6e6a6446a701576d4174046c7aaf387671efe95e2bc9
-
Size
1.1MB
-
MD5
7e1f6c0831321b52b805227eff037d2d
-
SHA1
76687f8ea5c1b98cc998aaaae4b7e8d2fe4f5a7d
-
SHA256
871d418d064e93fc7c0d6e6a6446a701576d4174046c7aaf387671efe95e2bc9
-
SHA512
b5d7d03a09b609a6ef9a53fac9274ea2b0cc0e2d1e705a24fd846e6754e04880f2f1ea14599541fb98c2094a5a0e2485df84df83120b7e79ac49901270ef8f99
-
SSDEEP
1536:PAkw9KtJwlvOzqHa++/rC/UBdxBdQ/zeqL6h:oYrYOeHP+jC/UBdxBRqy
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
871d418d064e93fc7c0d6e6a6446a701576d4174046c7aaf387671efe95e2bc9.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE