Behavioral task
behavioral1
Sample
c5d18cdad9ffeaafc81adda28eaaa64ce9ee0e2c7ccc903bac0a8c8721976d32.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5d18cdad9ffeaafc81adda28eaaa64ce9ee0e2c7ccc903bac0a8c8721976d32.dll
Resource
win10v2004-20220812-en
General
-
Target
c5d18cdad9ffeaafc81adda28eaaa64ce9ee0e2c7ccc903bac0a8c8721976d32
-
Size
1.1MB
-
MD5
accd6bb4516016c5148c875cde03721f
-
SHA1
477f5df42322f43e0e180b7fdd50f757204df97b
-
SHA256
c5d18cdad9ffeaafc81adda28eaaa64ce9ee0e2c7ccc903bac0a8c8721976d32
-
SHA512
35f8c4f0304b15c7ec01b7d2407a320a02ca3464f728a3955a349701f6c953ab10a3cd16903fa9865b58551284888a4ff386ad97be7bb24010e863da4d479dd2
-
SSDEEP
1536:Mmon81hcDok9U2Qo2boTL8ASA6MmfXmuWS2rXm+47OjuJA5H/pv13e9NfitGgOU:71hcaBoPThmeuWSUXm+4+uJWpvU9xMl
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c5d18cdad9ffeaafc81adda28eaaa64ce9ee0e2c7ccc903bac0a8c8721976d32.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE