Behavioral task
behavioral1
Sample
bb8ae888b849d01395e610d982f52eb887ce8404aeae921d4d4846808353334b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bb8ae888b849d01395e610d982f52eb887ce8404aeae921d4d4846808353334b.exe
Resource
win10v2004-20220812-en
General
-
Target
bb8ae888b849d01395e610d982f52eb887ce8404aeae921d4d4846808353334b
-
Size
418KB
-
MD5
6cf31a6c76973e4c7204e436544ac2e0
-
SHA1
b93bee0b2781b3cdc60c455efbbe1ff6778ec7d2
-
SHA256
bb8ae888b849d01395e610d982f52eb887ce8404aeae921d4d4846808353334b
-
SHA512
9142eb84397fe532d68d4292f5416ef6f5c3c6cce35c7ac3b90d4b3e583d8a8ca2450f26d97e683f9bcd156f524c3f0aa382c2325416b322d0b222766e98187e
-
SSDEEP
12288:tuZ529Es9Hm6cPEZyi8BmnAqN36m+MDFKCuP+zeo:tuZ52lGtsZKBmnrN36m+MIPHo
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
bb8ae888b849d01395e610d982f52eb887ce8404aeae921d4d4846808353334b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE