Static task
static1
Behavioral task
behavioral1
Sample
3b398d00dde2a5de31879af508c40aace2b580f402ff1390353f711f6ad4da7e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3b398d00dde2a5de31879af508c40aace2b580f402ff1390353f711f6ad4da7e.exe
Resource
win10v2004-20220414-en
General
-
Target
3b398d00dde2a5de31879af508c40aace2b580f402ff1390353f711f6ad4da7e
-
Size
947KB
-
MD5
7695e8e4132e351e3b46f2b4d989fbb2
-
SHA1
df118b053abd7c25fdcce30994ff4202317a5fea
-
SHA256
3b398d00dde2a5de31879af508c40aace2b580f402ff1390353f711f6ad4da7e
-
SHA512
5be510f385e90b67996a43892a4ac0bf580718e3cf617665e381e09d004338eb3cbcc5228d57d0f9d65293802a31b9446becd1247e7f6714b6115184c355ab83
-
SSDEEP
24576:4y/4UiZTW//ao6BRm4hLKmVVTNxOEi7ORh/1R:4y/a1BRm4dKwVTNxP1hX
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
3b398d00dde2a5de31879af508c40aace2b580f402ff1390353f711f6ad4da7e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 587KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE