Behavioral task
behavioral1
Sample
3e985135a9b4924d1de3dd8eed37cf6d34a68cf385299698482310c89995989e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e985135a9b4924d1de3dd8eed37cf6d34a68cf385299698482310c89995989e.exe
Resource
win10v2004-20220812-en
General
-
Target
3e985135a9b4924d1de3dd8eed37cf6d34a68cf385299698482310c89995989e
-
Size
51KB
-
MD5
6a2ac08222052ff91d797d46d7216007
-
SHA1
c2d7d3b15b4c615020bd88ae0a8d3ae8b1896040
-
SHA256
3e985135a9b4924d1de3dd8eed37cf6d34a68cf385299698482310c89995989e
-
SHA512
a44de271da1b55e18269bc6f53c0e6be1bc4c22a8d25a29676a1efa9b17cfd4604633b45faeb64d57e0aefac719be43dc05f13f0b1c7101f7db7a0f3d1798242
-
SSDEEP
1536:8kUPKyau/ut/mfQF90cKl3o55DHAJrcr04JP1:8tKy3Q/mfY90cKhu5DCcht
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
3e985135a9b4924d1de3dd8eed37cf6d34a68cf385299698482310c89995989e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE