_�����ӳ���
Behavioral task
behavioral1
Sample
ce9db680eb017265fa08d1853b71d93e25e3c0f4bbf0a937ccc650069440ff72.dll
Resource
win7-20230831-en
General
-
Target
ce9db680eb017265fa08d1853b71d93e25e3c0f4bbf0a937ccc650069440ff72
-
Size
137KB
-
MD5
3098d294c8e44572059a81510f60e9b7
-
SHA1
d1f26bca8981d1c48e404631e2a14f1ad7db8209
-
SHA256
ce9db680eb017265fa08d1853b71d93e25e3c0f4bbf0a937ccc650069440ff72
-
SHA512
cd7a16d4dbca0bb32aebb5b54c07babc3cf133b5889359e109d3feeb4c06c9d09a8b6459d1bac01d755097be4df47bc41fa6c55aabe19f45bfd656c11f9c6e4f
-
SSDEEP
3072:zbltYoP7DBBT3hoWU6av1yJQW5ufGN/0tO74WWSKIXeVMZBVsLyYFKW:zbltYe1F3hk6a92Nu+N/0m43vxVMvirF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce9db680eb017265fa08d1853b71d93e25e3c0f4bbf0a937ccc650069440ff72
Files
-
ce9db680eb017265fa08d1853b71d93e25e3c0f4bbf0a937ccc650069440ff72.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 74KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Client Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE