Behavioral task
behavioral1
Sample
aa470f87be63da7d05ca757ba011e7ea3446380a46ce86597e40ba92f22433b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa470f87be63da7d05ca757ba011e7ea3446380a46ce86597e40ba92f22433b5.exe
Resource
win10v2004-20220812-en
General
-
Target
aa470f87be63da7d05ca757ba011e7ea3446380a46ce86597e40ba92f22433b5
-
Size
5.2MB
-
MD5
c3a05ce9352d9d3527de572e8bab2cbf
-
SHA1
77251c218a8cb8649244ac8e9ac2f09844040fc7
-
SHA256
aa470f87be63da7d05ca757ba011e7ea3446380a46ce86597e40ba92f22433b5
-
SHA512
ed8072779f5498d9e7a2a184d296e3ece67ec3f381c7d6882e5c602cb53a11cd202471dd59e2806da6e819f34445eac281efa18395d1a0ccfe952675532d4c21
-
SSDEEP
98304:Exj063raUxPsaruULuNqUn5J6U5Xy4/v4OtvYcfyQvjvESP5QL6XbAvTWwi:EtFb3xEzULu4UN5y4/jvyQvjv7wT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
aa470f87be63da7d05ca757ba011e7ea3446380a46ce86597e40ba92f22433b5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3.7MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 121KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE