Behavioral task
behavioral1
Sample
31194926837b4804b9e9e118a13fd6f83b14fc8c29fcb7b59cd4ced41f6bc1b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31194926837b4804b9e9e118a13fd6f83b14fc8c29fcb7b59cd4ced41f6bc1b8.exe
Resource
win10v2004-20220812-en
General
-
Target
31194926837b4804b9e9e118a13fd6f83b14fc8c29fcb7b59cd4ced41f6bc1b8
-
Size
71KB
-
MD5
d8249c98c33d12aaac215fea186ce003
-
SHA1
85e1addfa005ad5d074702dccfb746559f3b97a0
-
SHA256
31194926837b4804b9e9e118a13fd6f83b14fc8c29fcb7b59cd4ced41f6bc1b8
-
SHA512
a7d08fbdebf38f518356c8b2ef37ad5bc788c5846e3052e0b46d8f0599dc6bf5c687f56223c6f43dff150cb8178fdd45262be7d896f038940b3343cd661dcfa6
-
SSDEEP
1536:y50CbkTISEl2YSbFVGU9rYQxOXFRh15jp/uN02Otk4BrLQ1ucW33:xWkESEgYShlrpaLhPkW2D12
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
31194926837b4804b9e9e118a13fd6f83b14fc8c29fcb7b59cd4ced41f6bc1b8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 62KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE