Behavioral task
behavioral1
Sample
9fea531354a7bd1aad3d82643f059f55b9a3b9337a6f63aef0f1d44727029cc3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9fea531354a7bd1aad3d82643f059f55b9a3b9337a6f63aef0f1d44727029cc3.exe
Resource
win10v2004-20220901-en
General
-
Target
9fea531354a7bd1aad3d82643f059f55b9a3b9337a6f63aef0f1d44727029cc3
-
Size
861KB
-
MD5
6470a592ef1550094206b1190bc25378
-
SHA1
3748131e0546f886f3642d77e892826c725a742f
-
SHA256
9fea531354a7bd1aad3d82643f059f55b9a3b9337a6f63aef0f1d44727029cc3
-
SHA512
df21b60aad892fd3e60fc27c76502f628b170feae2da77ec9a6ccee0bf6afae9cf97a03fae9478f83d753b0d506af0587ab55252111a85f163cb8cafe489c78c
-
SSDEEP
24576:4w0YtI8Vb3tge9K8cWdlXy1akKjrtGg91fd:dyybue9qgX4atl1fd
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9fea531354a7bd1aad3d82643f059f55b9a3b9337a6f63aef0f1d44727029cc3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 786KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE