Behavioral task
behavioral1
Sample
17f046e5035a5e68efaa3dc26d1601ada119a1fad468aca75dd3887f513f187c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
17f046e5035a5e68efaa3dc26d1601ada119a1fad468aca75dd3887f513f187c.exe
Resource
win10v2004-20220812-en
General
-
Target
17f046e5035a5e68efaa3dc26d1601ada119a1fad468aca75dd3887f513f187c
-
Size
360KB
-
MD5
3231282e5868f5c5dadc6a06107824ec
-
SHA1
2c59b9ec0266a07bb2b2272707df66ae7e224f78
-
SHA256
17f046e5035a5e68efaa3dc26d1601ada119a1fad468aca75dd3887f513f187c
-
SHA512
bdb7e9186f0e7f124fc7340ced79f3155ebe76d4fb376fcab8aeb5b68aaa40faf44133bd49040ef734b10d59c5643ab906e5bb569554d5f7c38d422198743bda
-
SSDEEP
6144:E+Z1j7uSR9TdGy105GQP76WVH7kSSpFcbd/Iu2v4C0vDUGy0HPi:E+jHTpe5GQj/oNWdawRDE0H
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
17f046e5035a5e68efaa3dc26d1601ada119a1fad468aca75dd3887f513f187c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 240KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cqu001 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cqu001 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE