RockeyInit
Behavioral task
behavioral1
Sample
d6d208c4d29270101d9889ba583de288aba9a8bb4cb0417cb641352692f87715.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6d208c4d29270101d9889ba583de288aba9a8bb4cb0417cb641352692f87715.dll
Resource
win10v2004-20220901-en
General
-
Target
d6d208c4d29270101d9889ba583de288aba9a8bb4cb0417cb641352692f87715
-
Size
351KB
-
MD5
ddde36df691ff8f33c17a1398565aab6
-
SHA1
5e2a386adf7fb4f2071b0c8712df4d1b3d68d7fe
-
SHA256
d6d208c4d29270101d9889ba583de288aba9a8bb4cb0417cb641352692f87715
-
SHA512
9f6c1db7947ba3e1619fe4216a11772591c822a42081d0132ee6c4c769ed43a75489889b3544aac84024295e13de74c8335063093c2c5ea3f5866de88ec51002
-
SSDEEP
6144:EobD6iEGF2idZecnl20lHRxp3gjncduD7yB9VCO6Sco4q8+dE6CqO:Eo1EyF3Z4mxxQDqVTVOCO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
d6d208c4d29270101d9889ba583de288aba9a8bb4cb0417cb641352692f87715.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE