Behavioral task
behavioral1
Sample
5221e4dce0ce07aecef412b6bcb23f8a284dc0efee061433f2f6258bbb2645aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5221e4dce0ce07aecef412b6bcb23f8a284dc0efee061433f2f6258bbb2645aa.exe
Resource
win10v2004-20220812-en
General
-
Target
5221e4dce0ce07aecef412b6bcb23f8a284dc0efee061433f2f6258bbb2645aa
-
Size
970KB
-
MD5
dde39e480ddd023742dfc6d662c0ec66
-
SHA1
b9ca7f13ebed58225fb4b8975dceceb78b0ecb6a
-
SHA256
5221e4dce0ce07aecef412b6bcb23f8a284dc0efee061433f2f6258bbb2645aa
-
SHA512
218bbcbabd7f75ee0ce49d8a6de8e55a8dfddc80c5ad3f89baf2d3023f6fccf2b8baa751538fe1b7b85386e6947b76e454775cfd1260a4d459212f66192165b8
-
SSDEEP
24576:+50rVrUoMYCsiYYzMbe31doZkcXQNh2aMg:BfMY0Qbi1d4kFNh2E
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
5221e4dce0ce07aecef412b6bcb23f8a284dc0efee061433f2f6258bbb2645aa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 954KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE