_�����ӳ���
Behavioral task
behavioral1
Sample
0a4a2cd86d8a7d242a6f8273e47c7100f7309016204f65bdfc67279eb3e5de45.dll
Resource
win7-20231020-en
General
-
Target
0a4a2cd86d8a7d242a6f8273e47c7100f7309016204f65bdfc67279eb3e5de45
-
Size
82KB
-
MD5
57c929184785dfcad8cd7d9980815cc8
-
SHA1
95ca301e765255447bb28f76cda33f234921b47b
-
SHA256
0a4a2cd86d8a7d242a6f8273e47c7100f7309016204f65bdfc67279eb3e5de45
-
SHA512
dac931200be88ae7cc449e58e185d3ad82b2a66e02776b5a15781ea8732bd25c99668cafe102c22221302fdce850210e86140b455451d3bfc83c9288afbc2513
-
SSDEEP
1536:oMjawCVhtGlnz3dj8m0JBegwqtuMAtkVQDz7Os7UTKcto2ZWdHUHrbHLwahW:owaNFGlJjxCeCdAOIOs7Gt1Zco/7h
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a4a2cd86d8a7d242a6f8273e47c7100f7309016204f65bdfc67279eb3e5de45
Files
-
0a4a2cd86d8a7d242a6f8273e47c7100f7309016204f65bdfc67279eb3e5de45.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 49KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Client Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE