toBervices
Behavioral task
behavioral1
Sample
15c9201b543e06cfd2ae8ad18cffed95489fc19b5500f2035cac1afdcd56b75e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
15c9201b543e06cfd2ae8ad18cffed95489fc19b5500f2035cac1afdcd56b75e.dll
Resource
win10v2004-20220901-en
General
-
Target
15c9201b543e06cfd2ae8ad18cffed95489fc19b5500f2035cac1afdcd56b75e
-
Size
658KB
-
MD5
42ee1e80d0d165cdee928e24a3c307f9
-
SHA1
a7c3cf64b1e49ff503ebcb1b14730ba88f9a5cd6
-
SHA256
15c9201b543e06cfd2ae8ad18cffed95489fc19b5500f2035cac1afdcd56b75e
-
SHA512
612f692ece823698c6a9827932d0e1e54d4dcd0d49acfa1431ddc6d4bb764be0855e44741740e660b6eb277c9454be690994ceefef7d5def98f2924a797097c4
-
SSDEEP
12288:VGy5u+2H6UbDxiEUd+m7NKCZrheYRor4037E0KckHQXuFC30EQ2jM:15M6ZN+0NK8EYRorsLckwXus30j2jM
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
15c9201b543e06cfd2ae8ad18cffed95489fc19b5500f2035cac1afdcd56b75e.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 498KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 53KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE