ServiceMain
Behavioral task
behavioral1
Sample
9685b5ebe326eff0894e355aa311ac80.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9685b5ebe326eff0894e355aa311ac80.dll
Resource
win10v2004-20231215-en
General
-
Target
9685b5ebe326eff0894e355aa311ac80
-
Size
755KB
-
MD5
9685b5ebe326eff0894e355aa311ac80
-
SHA1
b0dbb644dc087552e177b00edd78cd349f637025
-
SHA256
f446e86f0cdc3fff1c38b402e7f9d69c960bedc38980a744b7a62ae1359ccd07
-
SHA512
a891ec2b95cdc932f1c5bb2e926cef621a2c4f100bb3fe3d2991c951ddf187af3da6d2619681900038fef5e61d67af3e0ca18f7ecc5ddd407fe65a4e36387138
-
SSDEEP
12288:+zG6axRntjhGHvd+OOSfbXej1cKGvgWE1sqQFxb3rUPsp+00BliT58Wvv3:L6oXGV+eZqQD3oj05582v3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9685b5ebe326eff0894e355aa311ac80
Files
-
9685b5ebe326eff0894e355aa311ac80.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 616KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 57KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE