Behavioral task
behavioral1
Sample
b7c89fb7e5df3da56da84c5f4b79fc2521cc5f1b93250eb5b4f59dbaab8ccac9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7c89fb7e5df3da56da84c5f4b79fc2521cc5f1b93250eb5b4f59dbaab8ccac9.exe
Resource
win10v2004-20220901-en
General
-
Target
b7c89fb7e5df3da56da84c5f4b79fc2521cc5f1b93250eb5b4f59dbaab8ccac9
-
Size
895KB
-
MD5
45be802a53d6981b36df7fc8d95ea7b8
-
SHA1
cdd2a1d0446d6bcfe5e574bdecb1364a6950185a
-
SHA256
b7c89fb7e5df3da56da84c5f4b79fc2521cc5f1b93250eb5b4f59dbaab8ccac9
-
SHA512
eb5d64989da9e4e674db6b289e5ac4a9a3893a47201c15b0a28c8906772e8a37dfc2171ce7eb1ea397ea5baad58349fdd832b741e64d231622c93b6cb1f3d06d
-
SSDEEP
24576:49MiYMY0QREc1lWyJEKtmNL7qS2+dVd9rISbA393b4/2W:3h9D4yCKgxHb3r1ctrc2W
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b7c89fb7e5df3da56da84c5f4b79fc2521cc5f1b93250eb5b4f59dbaab8ccac9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 821KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 21KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE