_�����ӳ���
Behavioral task
behavioral1
Sample
755217fd44e1b0a7a9423256a844f979eea352ef00555f9f552c80d5c9967d34.dll
Resource
win7-20230831-en
General
-
Target
755217fd44e1b0a7a9423256a844f979eea352ef00555f9f552c80d5c9967d34
-
Size
90KB
-
MD5
a55f4485bf04ab4e0a76245c9cb24365
-
SHA1
2ab901ca2166cdf5a4505d126c696d4ca72e22a8
-
SHA256
755217fd44e1b0a7a9423256a844f979eea352ef00555f9f552c80d5c9967d34
-
SHA512
2fb06a958ab944f00b605cb2b823d498576fd8367bfcdf2b4e08e7dd3e9a707300d87d06096444e30b49e7679fbdbbe16e9077dd5a2f86118e5bedec4f3a55a0
-
SSDEEP
1536:IzSnjkP5AF9DGuv5472oh1C5y8JqOOYloZrNwzYYHrOQ8NCnNlIKqSvNTYvgYwwT:MSnJF9CuBQ25ybOKNWYYHrOQcsH4oNT6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 755217fd44e1b0a7a9423256a844f979eea352ef00555f9f552c80d5c9967d34
Files
-
755217fd44e1b0a7a9423256a844f979eea352ef00555f9f552c80d5c9967d34.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 55KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Client Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE