Behavioral task
behavioral1
Sample
0a0b3424d214ba35683455536fed6ec6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a0b3424d214ba35683455536fed6ec6.dll
Resource
win10v2004-20231222-en
General
-
Target
0a0b3424d214ba35683455536fed6ec6
-
Size
201KB
-
MD5
0a0b3424d214ba35683455536fed6ec6
-
SHA1
4c4eba0af14c9d7d34913ccfd64aca7669ae89d9
-
SHA256
3809f9d7343232fc202d9f27765d6e26d36cd26df873861a5de851517678b058
-
SHA512
4020a859e1622134c8f0926c30c55537497ebe087a6b26a3e526d1abcb5726aab1445c6e94aaaca52a4f09d3efd973888bcc05745a153afaca5d642b9d8da1a1
-
SSDEEP
3072:c6MVjAcCKKsVjyaG4IXwc239AEBhNZAxdJIeQ7hqrw1o98PsMBv3MCmJp2ZO95C:c6MpA4KKA4q2ffKx/8GcsMBvMCmJp25
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a0b3424d214ba35683455536fed6ec6
Files
-
0a0b3424d214ba35683455536fed6ec6.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 54KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Snda Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE