Behavioral task
behavioral1
Sample
1a7a5f86980f536952c3d22c53e635f4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a7a5f86980f536952c3d22c53e635f4.dll
Resource
win10v2004-20231222-en
General
-
Target
1a7a5f86980f536952c3d22c53e635f4
-
Size
413KB
-
MD5
1a7a5f86980f536952c3d22c53e635f4
-
SHA1
360a4031447e962ef8c308097a49f2f1644b1922
-
SHA256
30c5b7f015205f3eb9a6e471306025466d793a7f9d6c68344a0a1f6925af950f
-
SHA512
55a001540e9714ddddd864b2f1c8f8b24d7d20b7f61052b2d07015bc9f6d3d31215365bbec73e598bda75e253437367d9f7cec7dc3709c804646e016643d88c4
-
SSDEEP
12288:UkKeRK/lGRgOUqmq9kR6lhKXWmD2rO7cGVD9EE5:4oK/cRgOnmq9g6qDcGVDaK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a7a5f86980f536952c3d22c53e635f4
Files
-
1a7a5f86980f536952c3d22c53e635f4.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 78KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 293KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE