Behavioral task
behavioral1
Sample
de029e0b834aa20ff343403b2ffd8ccdf8472c1c6a4b6ef4a235cba34c4ae27a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de029e0b834aa20ff343403b2ffd8ccdf8472c1c6a4b6ef4a235cba34c4ae27a.dll
Resource
win10v2004-20220812-en
General
-
Target
de029e0b834aa20ff343403b2ffd8ccdf8472c1c6a4b6ef4a235cba34c4ae27a
-
Size
83KB
-
MD5
fdeefd74053bbcf1fbb1401eee5a3a01
-
SHA1
2d824c3e2894f3f4627834c44751d26623e70a55
-
SHA256
de029e0b834aa20ff343403b2ffd8ccdf8472c1c6a4b6ef4a235cba34c4ae27a
-
SHA512
717c7918074987141b1066f34048b39658572dd27c0ec804c24c9773ea9b582ea771d250ba9bebf1e692b3c6be1d0be3c183f3b9a4710ce4dbb1b851c2d85491
-
SSDEEP
1536:wVHoPQib/n/6JkSMRv4WMZKNhG5g9EICY4HlUHiG/m/0d0rXj:UHoPQQ//NdRiUaSExHEiG/msd0rT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
de029e0b834aa20ff343403b2ffd8ccdf8472c1c6a4b6ef4a235cba34c4ae27a.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 56KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE