Behavioral task
behavioral1
Sample
75e349fce0e44778bc93576f1095abae.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75e349fce0e44778bc93576f1095abae.dll
Resource
win10v2004-20231215-en
General
-
Target
75e349fce0e44778bc93576f1095abae
-
Size
54KB
-
MD5
75e349fce0e44778bc93576f1095abae
-
SHA1
f45c1db4c423a8c7b1aed34d0901a64ef74d1768
-
SHA256
09b69a94a4eef9d71955b8fff4a6ca1aff6854f7a338a9ba380e68bb43ab6f77
-
SHA512
a42a30dfe5381620d62c00c5916364de8f6f2244320742ab6e67d9ce940da99303e5ac814fa21b2372bf4a32878c2bbb4cf4c742fb7246acff98cccada574b7e
-
SSDEEP
768:mfRAJnjQhKN93O9HbYX7Bn4c79PnhmceBntVrf7wE+fs+KGUU8AQQ1eswlntx1/5:mfqnj3O9HEpZJitVrzWZUUJQQ4sc31Y
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75e349fce0e44778bc93576f1095abae
Files
-
75e349fce0e44778bc93576f1095abae.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtec Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE