Behavioral task
behavioral1
Sample
fbef284db5b58cd223161b46650beee6831542fec16c637c7fff5facab5a37e6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fbef284db5b58cd223161b46650beee6831542fec16c637c7fff5facab5a37e6.exe
Resource
win10v2004-20220901-en
General
-
Target
fbef284db5b58cd223161b46650beee6831542fec16c637c7fff5facab5a37e6
-
Size
5.2MB
-
MD5
3e104140eddeb1ea5cb03e40ab4d0063
-
SHA1
10e9970e6cd20506ef8c6bf48eb4e4eb34340ef2
-
SHA256
fbef284db5b58cd223161b46650beee6831542fec16c637c7fff5facab5a37e6
-
SHA512
36e491afc0ed6600418f9d6564719eb3385fb8897842a4806cc335d34bc66f166506aa8ded950db620a9dc74dd0b6cecefb93fca0f806e2e44144a544269896f
-
SSDEEP
98304:Exj063rcmaXCLPe51Fdxyp7D+0ajBkWVfTPAqold4gZ+OxRmhvu9jVMlMtXDsx0B:EtFbcmaXCLPejdyVCrjdfTLold41Ox2k
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fbef284db5b58cd223161b46650beee6831542fec16c637c7fff5facab5a37e6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3.7MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 121KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE