Behavioral task
behavioral1
Sample
2cf939e53432eac17fea2da63307c87b09ac363ba1d00fb12cd8b90382e47145.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2cf939e53432eac17fea2da63307c87b09ac363ba1d00fb12cd8b90382e47145.dll
Resource
win10v2004-20230220-en
General
-
Target
2cf939e53432eac17fea2da63307c87b09ac363ba1d00fb12cd8b90382e47145
-
Size
1.1MB
-
MD5
f21986c00a0be63b3eee5820fbdd2516
-
SHA1
31ea905e7e3142d20bb5ac69566189b7fba22a09
-
SHA256
2cf939e53432eac17fea2da63307c87b09ac363ba1d00fb12cd8b90382e47145
-
SHA512
b992bf6bc0f911d33ffdaf96deaeff82b191e0092cee25e09d9c5b3efb189c94c38d7f54fe26ff4ad604d61f13ff18748cdd5103602b29a2ebb8911bb8fd47c5
-
SSDEEP
24576:07WuHmDZj4cZ63+S+QSQPUtp8aM8t3W5pzvwalH4yu1I:oWuHmp76GJQPUtpJMyEpqe
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
2cf939e53432eac17fea2da63307c87b09ac363ba1d00fb12cd8b90382e47145.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 818KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neet Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE