toBervices
Behavioral task
behavioral1
Sample
64bddfed75248057845d22d7651ddc2c4dfddd841497d694b8b2700afef371b0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64bddfed75248057845d22d7651ddc2c4dfddd841497d694b8b2700afef371b0.dll
Resource
win10v2004-20220812-en
General
-
Target
64bddfed75248057845d22d7651ddc2c4dfddd841497d694b8b2700afef371b0
-
Size
464KB
-
MD5
67f4931ae778403e03cac65e8947e752
-
SHA1
36322b30478327241e8aa7ec223833552c1e7c31
-
SHA256
64bddfed75248057845d22d7651ddc2c4dfddd841497d694b8b2700afef371b0
-
SHA512
917c3a0c241d1e0895303ecb6f9986ee16540dbf9af2629836ac3057bcf7070f14b1cba6929915a65fee385cb92faf75e4ecaf6c51813c707debcb41a656670b
-
SSDEEP
12288:ZN1zbYIUq89/DYW9iMNV3wkbKtiEl/RbOjMJ0EQ2jQyx4:hzb3W9znJW5bOoJ0j2je
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
64bddfed75248057845d22d7651ddc2c4dfddd841497d694b8b2700afef371b0.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 326KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE