Behavioral task
behavioral1
Sample
cebb2b58e10f73492eedb812e65575d9ce821de5e2741c2946fffd97c59fde3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cebb2b58e10f73492eedb812e65575d9ce821de5e2741c2946fffd97c59fde3f.exe
Resource
win10v2004-20220812-en
General
-
Target
cebb2b58e10f73492eedb812e65575d9ce821de5e2741c2946fffd97c59fde3f
-
Size
1.1MB
-
MD5
3969f41f53cb2725860b8fc713bf4b44
-
SHA1
bef95065a4a79be5922718cb917e08daf270218b
-
SHA256
cebb2b58e10f73492eedb812e65575d9ce821de5e2741c2946fffd97c59fde3f
-
SHA512
02b1f38c06a02d719f215506d6f1e4984c0f0eee5cdbedc992edfce9e4f0ed899fb465c3a84af54629125841cbbfa98cffa15d7da852253c81c6c6d742edde14
-
SSDEEP
24576:8bVqtEv5rVpwvRsrqgbrrOAP2EqxZIfT/hwKAd6Ljrfe1S5PIrcN:8RqtExrVp0REqcrHFjfTTAkHrfe2IrcN
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
cebb2b58e10f73492eedb812e65575d9ce821de5e2741c2946fffd97c59fde3f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 916KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 25KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 183KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE