GetModelInts
Behavioral task
behavioral1
Sample
efc7894d2a74e7b8663abb635602b6404cc8b6f64b4a1da1a434a7492af74168.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efc7894d2a74e7b8663abb635602b6404cc8b6f64b4a1da1a434a7492af74168.dll
Resource
win10v2004-20220812-en
General
-
Target
efc7894d2a74e7b8663abb635602b6404cc8b6f64b4a1da1a434a7492af74168
-
Size
715KB
-
MD5
5a82cb965178a5fa053af04de432ecd9
-
SHA1
a6a81b085c5239680479de7859087eaa1d1c4361
-
SHA256
efc7894d2a74e7b8663abb635602b6404cc8b6f64b4a1da1a434a7492af74168
-
SHA512
91dc806a1f801133980c1877655e019ef0a275a811f9c66a9f6df7b68a6836f9991a29ef4d7bfaaeb8767b3f0be984997ccc974317de19bcf854a3973b5a0db2
-
SSDEEP
12288:HTvLrNEPeBL/PPl+7rYAcec8Rmvjcp2i1ExkjbVK9ARqwobl4kmePDK:+m99+nYVB8QGE6jbVK9ARUbl4kme7K
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
efc7894d2a74e7b8663abb635602b6404cc8b6f64b4a1da1a434a7492af74168.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 436KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 31KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 55KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE