_�����ӳ���
Behavioral task
behavioral1
Sample
36c8b6585ced61e6c45819f62f88714aa27374c1abb70bd251b44f4dfb0a40da.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
36c8b6585ced61e6c45819f62f88714aa27374c1abb70bd251b44f4dfb0a40da.dll
Resource
win10v2004-20231023-en
General
-
Target
36c8b6585ced61e6c45819f62f88714aa27374c1abb70bd251b44f4dfb0a40da
-
Size
360KB
-
MD5
c32d9abac5d462144aa9c618c109e95a
-
SHA1
7f3e814126542b3c4b4f127875aec038f459a066
-
SHA256
36c8b6585ced61e6c45819f62f88714aa27374c1abb70bd251b44f4dfb0a40da
-
SHA512
464d8044db1f380bae13106400174e7324c3ff7b906658f947a6dff8650546fa27ce80d0d18ce954d7a2eb6c0ce0062e2f5ff0579cba8dd286716d7377575e35
-
SSDEEP
6144:wpJspk89SwyUOb41Aqy9MLRfgooo7+iagNwIeSNtZtxtWFZt/TG:IJsn9u8oXwHeqt/Oft/6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c8b6585ced61e6c45819f62f88714aa27374c1abb70bd251b44f4dfb0a40da
Files
-
36c8b6585ced61e6c45819f62f88714aa27374c1abb70bd251b44f4dfb0a40da.dll windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 210KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE