Behavioral task
behavioral1
Sample
71e2121115e845d88418a2fdd1207a8976bbf3502cd07ad9a4b916c1c2e886fa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
71e2121115e845d88418a2fdd1207a8976bbf3502cd07ad9a4b916c1c2e886fa.exe
Resource
win10v2004-20220812-en
General
-
Target
71e2121115e845d88418a2fdd1207a8976bbf3502cd07ad9a4b916c1c2e886fa
-
Size
1.8MB
-
MD5
c0b31dd5b0b245d39e6a34020759c095
-
SHA1
bee1c5399a3db534b573a12db187da17ff8a336d
-
SHA256
71e2121115e845d88418a2fdd1207a8976bbf3502cd07ad9a4b916c1c2e886fa
-
SHA512
b1133a868ecd7ac5d663a072624bebb2a56c30a617f7be43ac0fb3dc813f3e0f4d29ce3edd881894c239cfc120ba216e976dc5eee88e96c292ae693c5a04996d
-
SSDEEP
49152:BR0zcBL5/lDpTKRFZZMSorzBx5iuWeTsYfj79PWJUHKRib:70gBL5jTGZMbbQuWEskj7geHrb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
71e2121115e845d88418a2fdd1207a8976bbf3502cd07ad9a4b916c1c2e886fa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.1MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 25KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 671KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE