Behavioral task
behavioral1
Sample
cb385669763bb85c14fc096a2f9e5a2e294570341e753575ee91aabc4aebfdf2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb385669763bb85c14fc096a2f9e5a2e294570341e753575ee91aabc4aebfdf2.dll
Resource
win10v2004-20221111-en
General
-
Target
cb385669763bb85c14fc096a2f9e5a2e294570341e753575ee91aabc4aebfdf2
-
Size
168KB
-
MD5
072ca5cc8863b4ace0f5f5f897a5e860
-
SHA1
9510ccb323f8f3a0cb0a57ad36046471601b6252
-
SHA256
cb385669763bb85c14fc096a2f9e5a2e294570341e753575ee91aabc4aebfdf2
-
SHA512
abe3089f94ed5e0db0ce5c4401cc603b1978e13a316785366e15a39d7a5b9a6b2c40c6c8b7e2dc84bbdcd962677fa0f20734013b0208916f208ecf287973792e
-
SSDEEP
3072:nuUZvDh0b3etY+m5FJBDpzk7LZIntvcgW4Js1qrgneChoCwj427kVMZ79:nRvOb3+hm5F/pzk/MxFq1wgeCE427kVi
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
cb385669763bb85c14fc096a2f9e5a2e294570341e753575ee91aabc4aebfdf2.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 157KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE