ServiceMain
Behavioral task
behavioral1
Sample
99d84d631b7efbaffd38a97564605f8b86ba47f2b7ffa0183a7d8d457b35a09d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99d84d631b7efbaffd38a97564605f8b86ba47f2b7ffa0183a7d8d457b35a09d.dll
Resource
win10v2004-20221111-en
General
-
Target
99d84d631b7efbaffd38a97564605f8b86ba47f2b7ffa0183a7d8d457b35a09d
-
Size
345KB
-
MD5
7b80362f752f6200b8d8c91ef339a105
-
SHA1
df105b09c1802a9f0e4669aa3500a1aa325466cc
-
SHA256
99d84d631b7efbaffd38a97564605f8b86ba47f2b7ffa0183a7d8d457b35a09d
-
SHA512
c2c0fa171744cae499ea54f026919ec43e60682d39a2c3a7704bd3eed9536ebf0473d92ea448686dad65d82110ca3935d03723dea43ad8e8595fcad6d3b8af62
-
SSDEEP
6144:7J80ghETdABjK1Oif8qhb3M+hd3TBEoqKrX98gWNlPTGQQm6agrdC1sO:7J80PAxK8c3MeDBHqKaNtTird4sO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
99d84d631b7efbaffd38a97564605f8b86ba47f2b7ffa0183a7d8d457b35a09d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 172KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE