Behavioral task
behavioral1
Sample
3f4603d3f44e3be98123dd93d1827555e7d90716e65e46ee7b87ca13636e7d8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f4603d3f44e3be98123dd93d1827555e7d90716e65e46ee7b87ca13636e7d8b.exe
Resource
win10v2004-20220901-en
General
-
Target
3f4603d3f44e3be98123dd93d1827555e7d90716e65e46ee7b87ca13636e7d8b
-
Size
134KB
-
MD5
135d56a763b46e994a967303fb590f79
-
SHA1
7df7712944640946ff40ef11b8a9f5d54710502e
-
SHA256
3f4603d3f44e3be98123dd93d1827555e7d90716e65e46ee7b87ca13636e7d8b
-
SHA512
ea25505f263c7dc895602bed5a68c48dce2738e447d2a8557218ed18b216cb79bb7aead1b8cdf53eecca7d3946610b14e0df2d13ff0f0768ee171e266e15bc07
-
SSDEEP
3072:S9RkQvnpedaad1Dz9RqjImbD6z16RHHC1D:GxEau1fqjI36RHu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
3f4603d3f44e3be98123dd93d1827555e7d90716e65e46ee7b87ca13636e7d8b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE