ShowForm
Behavioral task
behavioral1
Sample
021fbc84bf61d36eaad27c5aa640ef8609686ef33251bf690e8a46a6f03e0459.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
021fbc84bf61d36eaad27c5aa640ef8609686ef33251bf690e8a46a6f03e0459.dll
Resource
win10v2004-20230221-en
General
-
Target
021fbc84bf61d36eaad27c5aa640ef8609686ef33251bf690e8a46a6f03e0459
-
Size
363KB
-
MD5
46f5df25fe4df0471a3a1e41bb686ade
-
SHA1
7e0cb05c01a9788af21c9c65c9e5b54b3231bbfa
-
SHA256
021fbc84bf61d36eaad27c5aa640ef8609686ef33251bf690e8a46a6f03e0459
-
SHA512
147e970e6761dc4a189fd76c402936b020974a11a0241463fc8b816458ea5e519597104c3b6218f4eab31234cf5eeea6b3af7733251dee1cd5a4c1b23716d43d
-
SSDEEP
6144:kIDxomJFbegSnrdK/LX9PRFkPw8R5+YftBmbnrNE+2+HUsohTEKNQH0fB7cQcn:kWKm7beJBKDXzFk75B3mrryHFq0yQM
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 021fbc84bf61d36eaad27c5aa640ef8609686ef33251bf690e8a46a6f03e0459
Files
-
021fbc84bf61d36eaad27c5aa640ef8609686ef33251bf690e8a46a6f03e0459.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 231KB - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE