Static task
static1
Behavioral task
behavioral1
Sample
3df39fa4fcad907e856f53641ee025ac42f712c16e73cc295104a8c29c733436.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3df39fa4fcad907e856f53641ee025ac42f712c16e73cc295104a8c29c733436.exe
Resource
win10v2004-20220414-en
General
-
Target
3df39fa4fcad907e856f53641ee025ac42f712c16e73cc295104a8c29c733436
-
Size
3.2MB
-
MD5
f6f41a8ff2ceefbb922e8f3504310d27
-
SHA1
6972b44cd344e4ebaf616e7480e83487b92375b4
-
SHA256
3df39fa4fcad907e856f53641ee025ac42f712c16e73cc295104a8c29c733436
-
SHA512
2a5d687a455d7d57953bec8310bb64533c5d5f8d7287ca114e435f243b2956df7ee355aea31472c9c6e877c4d5e9c0543a18d2fc9c254c7e84c6cd043cd2f621
-
SSDEEP
98304:bcilpYAONsNi9XwgwfoG+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUz:bbpLi9XwgwAvmAI
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
3df39fa4fcad907e856f53641ee025ac42f712c16e73cc295104a8c29c733436.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE