CreateDLLForm
Behavioral task
behavioral1
Sample
d66f42177e7b6a1736f7e46ff4ebd2cdad3be8d671d9703dc0edc807372ef6dc.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
d66f42177e7b6a1736f7e46ff4ebd2cdad3be8d671d9703dc0edc807372ef6dc.dll
Resource
win10v2004-20230621-en
General
-
Target
d66f42177e7b6a1736f7e46ff4ebd2cdad3be8d671d9703dc0edc807372ef6dc
-
Size
139KB
-
MD5
e79c635c0c2dda4db19070491b69cf62
-
SHA1
70da7c6583f06ad56a6b59e7796c4e68670a6692
-
SHA256
d66f42177e7b6a1736f7e46ff4ebd2cdad3be8d671d9703dc0edc807372ef6dc
-
SHA512
74fc46818f199e6a4f56b98d14383694e5e97265f1bf93690dc15633cb9b67577d8417adf3d8d5ec8c2e8b3936157cbe67fc26d3ace145abad0b580553f9c416
-
SSDEEP
3072:rV99r4t2HxznblFdecT3ipVwaRwUXBJ/:39r4sRjp6cT3YwUXD/
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d66f42177e7b6a1736f7e46ff4ebd2cdad3be8d671d9703dc0edc807372ef6dc
Files
-
d66f42177e7b6a1736f7e46ff4ebd2cdad3be8d671d9703dc0edc807372ef6dc.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 51KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE