Behavioral task
behavioral1
Sample
58df3d47331f9c7575d31eb8001918ca7595afec245f0df097748f3aa9361c5e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
58df3d47331f9c7575d31eb8001918ca7595afec245f0df097748f3aa9361c5e.exe
Resource
win10v2004-20220812-en
General
-
Target
58df3d47331f9c7575d31eb8001918ca7595afec245f0df097748f3aa9361c5e
-
Size
1.3MB
-
MD5
6cbc4f8f1e9a865d03366f7578cce938
-
SHA1
f7064a187f5726b156c7ab6f79b7c56f1d53367d
-
SHA256
58df3d47331f9c7575d31eb8001918ca7595afec245f0df097748f3aa9361c5e
-
SHA512
cc049efa108e9d4e1ac7e903f350764f984bd5c3770cbe3e0887668b8d5b070879e1b0775070fef797ccec4bfbbb08729a1b3cc51374b3e1a5a695135bd5e9b5
-
SSDEEP
24576:JTWEDH9R33pKodMFVLo/SR4sHipAdplYbIp1CJhMGqbwLnRvwgEl0MiZpHAN:JDdR3QnySR4sBjCaIEaRvwiZpgN
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
58df3d47331f9c7575d31eb8001918ca7595afec245f0df097748f3aa9361c5e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 269KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 981KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE