GetModelInts
Behavioral task
behavioral1
Sample
ba0ee193ce114ea1ac9b5169e86f9878ab5981a12c19d15e57aa9e3ec08a0536.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba0ee193ce114ea1ac9b5169e86f9878ab5981a12c19d15e57aa9e3ec08a0536.dll
Resource
win10v2004-20220812-en
General
-
Target
ba0ee193ce114ea1ac9b5169e86f9878ab5981a12c19d15e57aa9e3ec08a0536
-
Size
257KB
-
MD5
91eda1e323ec53fc828af0c687512a95
-
SHA1
5f7cb7826e9072b1a97cdf51a0d61dd61a7743da
-
SHA256
ba0ee193ce114ea1ac9b5169e86f9878ab5981a12c19d15e57aa9e3ec08a0536
-
SHA512
7527f1f75410ba8c549c5bd7a2828094a1ddb10888384982ec280e4dfa88cf14a10216bcbbc5150999840d7c1201e5f8be9957743407b9c21d565ba5616e2279
-
SSDEEP
3072:oXsGC5AfJ/tFY8dRQasJOBaAyfFgLr7VYF3ajA23T4bUiiV4GYkr3eh08LyTm8kj:e9C5+nFY4RwfANX7VYI3T4YVbDU0Olse
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ba0ee193ce114ea1ac9b5169e86f9878ab5981a12c19d15e57aa9e3ec08a0536.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 111KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE