Behavioral task
behavioral1
Sample
b6040db68f20337702d9379aafc4e1b3fd2e5cbef10be6007f3bd756646faa03.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6040db68f20337702d9379aafc4e1b3fd2e5cbef10be6007f3bd756646faa03.dll
Resource
win10v2004-20221111-en
General
-
Target
b6040db68f20337702d9379aafc4e1b3fd2e5cbef10be6007f3bd756646faa03
-
Size
61KB
-
MD5
46d08fb151aa25f14232ae067fc4f661
-
SHA1
21af9a77bbf6a85a095f87835f020e48cdaa9f5b
-
SHA256
b6040db68f20337702d9379aafc4e1b3fd2e5cbef10be6007f3bd756646faa03
-
SHA512
5381af5bb2afb140766f62f32f4cbcf478109dabd395d0de603647039b349a47dfda439a5568df569c98f1ececc8237a74dabeb26d3ba534c930a05da13693d2
-
SSDEEP
768:ZmR4BzcIhLbLAOqQzGlsV93rLvEsH03nAmPh+dMXIr5+x7ha59:gR4Bzx5F1V93vkJYKMSA
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b6040db68f20337702d9379aafc4e1b3fd2e5cbef10be6007f3bd756646faa03.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8wl9b Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 35KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE