NSGetModule
Behavioral task
behavioral1
Sample
4b5ac1b6305d6aacf8cee92a1a99209b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b5ac1b6305d6aacf8cee92a1a99209b.dll
Resource
win10v2004-20231222-en
General
-
Target
4b5ac1b6305d6aacf8cee92a1a99209b
-
Size
415KB
-
MD5
4b5ac1b6305d6aacf8cee92a1a99209b
-
SHA1
2927e09efd5c410dcb7517177a5a34e451c6e421
-
SHA256
01c453253af0840379e1aedfc21d56d3ff6f1e94544b10006fe61b84d08e165f
-
SHA512
fe151e6b5925bdecb84f0e2f5d37c55946020862ca9108069b70e8f83970e2506751e58c3df99a124a35c14f07d5d47bdd4b9f3684a924f3390e1fd52e9611eb
-
SSDEEP
6144:HkRiaYRu9QLoonQ2a/IOBhI966AGkAjOpoaY71AAY27yZniIms+QTf3c7du:3hPfQEOvq6xGJOpq9RypiI3ERu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5ac1b6305d6aacf8cee92a1a99209b
Files
-
4b5ac1b6305d6aacf8cee92a1a99209b.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 92KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 285KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE