t
Behavioral task
behavioral1
Sample
c0ab17eadfa4a304f40bc2c82ed065f5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0ab17eadfa4a304f40bc2c82ed065f5.dll
Resource
win10v2004-20240226-en
General
-
Target
c0ab17eadfa4a304f40bc2c82ed065f5
-
Size
227KB
-
MD5
c0ab17eadfa4a304f40bc2c82ed065f5
-
SHA1
141a85207c245ecc30f61c983334ce15d32ec2f8
-
SHA256
700e8a9b61cad91063c64dfabcefc003d3f1c01dcce2c197451d72fbbeaa1a6d
-
SHA512
0482f3f16e52a2e5393aab1c3382fa696df9f778f73d7db6abf725097c3908a5da1cca358d074f1b01d372ce3ae0e7b539ccd00c1cae87eb765f51a93477e10e
-
SSDEEP
6144:CMCW3e0dZfFgCZTdsmnElEna7r54nPBrtkgSkE:V1dTdxGmnOV7r5oJrigSt
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0ab17eadfa4a304f40bc2c82ed065f5
Files
-
c0ab17eadfa4a304f40bc2c82ed065f5.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE