Behavioral task
behavioral1
Sample
cbe512c4a1f5d4e6ef77e73d5d6d8c0b027f76e0a0bf11927c631560bec69b59.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cbe512c4a1f5d4e6ef77e73d5d6d8c0b027f76e0a0bf11927c631560bec69b59.dll
Resource
win10v2004-20220901-en
General
-
Target
cbe512c4a1f5d4e6ef77e73d5d6d8c0b027f76e0a0bf11927c631560bec69b59
-
Size
146KB
-
MD5
8b9dd9257f2666c56360bc0bcca1016f
-
SHA1
40b9eecdca580e72e19a58dbc17c156a0cf00922
-
SHA256
cbe512c4a1f5d4e6ef77e73d5d6d8c0b027f76e0a0bf11927c631560bec69b59
-
SHA512
d59dddf44d36296ec2a662e54787c404d15059364324c8b777e0d450b13bc66123b10bc582f320b1066f76445e16136ef103762fe241bc4b656338069607c5f3
-
SSDEEP
3072:Wyfa96HM0XUGXU2Foh0Uu/xSgBvIbAyTq/VWUV9Aep6WkjgwRsFHAeHKe:ZqnVh05JSCvIbBTq/T6WkjgksfKe
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
cbe512c4a1f5d4e6ef77e73d5d6d8c0b027f76e0a0bf11927c631560bec69b59.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE