DoeServices
Behavioral task
behavioral1
Sample
a98a6581d2d0c55b20c7483b276e56b28b04771942a1873b2979ca384ce5ea09.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a98a6581d2d0c55b20c7483b276e56b28b04771942a1873b2979ca384ce5ea09.dll
Resource
win10v2004-20221111-en
General
-
Target
a98a6581d2d0c55b20c7483b276e56b28b04771942a1873b2979ca384ce5ea09
-
Size
824KB
-
MD5
9beefea2abc9f3e219ca5265f718705b
-
SHA1
742681a3feb48a08448903e726f196c64b191b20
-
SHA256
a98a6581d2d0c55b20c7483b276e56b28b04771942a1873b2979ca384ce5ea09
-
SHA512
005f968dd665250da254723fa2f6a06d5766b916984ae53f50a0eeb03e373223a1279f6745cf5f8db40316c424013b68d947d9e05e9ba1d6f9b9b1c2a456c9a3
-
SSDEEP
24576:cbQTCCZ17NINqwAKSPkOE63s+tn/gLD8G0ubY60j2j0rF:Fd72eKScMnYLD8zubY60jp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a98a6581d2d0c55b20c7483b276e56b28b04771942a1873b2979ca384ce5ea09.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 638KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 58KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE