ServiceMain
Behavioral task
behavioral1
Sample
e6965e58d624a6c22e7b45c4c57e0f748dfbfb46de88c4ee640410d9a1b82688.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e6965e58d624a6c22e7b45c4c57e0f748dfbfb46de88c4ee640410d9a1b82688.dll
Resource
win10v2004-20221111-en
General
-
Target
e6965e58d624a6c22e7b45c4c57e0f748dfbfb46de88c4ee640410d9a1b82688
-
Size
34KB
-
MD5
43c436b30ffc00850a44503237634450
-
SHA1
a13a4c911fdb9fe9f9b122fca0321ebe15ab319a
-
SHA256
e6965e58d624a6c22e7b45c4c57e0f748dfbfb46de88c4ee640410d9a1b82688
-
SHA512
cb5a4b80f384586f624bc033ca351ab9bc1b4a8a6781bcee9d77cc5ec672407aec4248998938bf407a498086cae56d9e3c8688b51f4739d7e1d9d3626b298d40
-
SSDEEP
768:A9DIVPj38+Zeo+C+JBFZXpli6ngmxcIQNsia3n4us4v4ZilijRPg9xXha5X:+IJ3lDeJBFJV/GIyCd4Gug5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e6965e58d624a6c22e7b45c4c57e0f748dfbfb46de88c4ee640410d9a1b82688.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE