nfmgfony
Behavioral task
behavioral1
Sample
bede02d3f9107d3957fc8aef41890028ad86f2ba1bf9216c94f707aa988a8d95.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bede02d3f9107d3957fc8aef41890028ad86f2ba1bf9216c94f707aa988a8d95.dll
Resource
win10v2004-20221111-en
General
-
Target
bede02d3f9107d3957fc8aef41890028ad86f2ba1bf9216c94f707aa988a8d95
-
Size
141KB
-
MD5
07831cd491ff5b8a2dd627d5ccaf6427
-
SHA1
7585c600a109ce019d379788f3d66dfc1287404d
-
SHA256
bede02d3f9107d3957fc8aef41890028ad86f2ba1bf9216c94f707aa988a8d95
-
SHA512
0e2c50fa7863e3e35211b9cc124221baca2eba778fb0fd892fcb4ba585c2741f57ddc4cefe1f3bd4d13a101baca3afd9a98742a95c95f5ed542d87a8c0ab8d31
-
SSDEEP
3072:b8Fy73Fh/E1Hu2RJQZ1tz/PR1sHbLiolw76fhVQDHFDNV7/r9/Wl9Ym:/FKHu2LWzpK7Liol1fhejFpVDr9ul9j
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
bede02d3f9107d3957fc8aef41890028ad86f2ba1bf9216c94f707aa988a8d95.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 126KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE