Behavioral task
behavioral1
Sample
68924404cf927bee9003fc2b50364ec848a75420f900b232bdf19571ef56c58c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
68924404cf927bee9003fc2b50364ec848a75420f900b232bdf19571ef56c58c.exe
Resource
win10v2004-20220812-en
General
-
Target
68924404cf927bee9003fc2b50364ec848a75420f900b232bdf19571ef56c58c
-
Size
1.4MB
-
MD5
0bc7c60b9d2ac7371d0093264522c664
-
SHA1
86efea7f15e2a60a32d61325f8c44d06be5717aa
-
SHA256
68924404cf927bee9003fc2b50364ec848a75420f900b232bdf19571ef56c58c
-
SHA512
5ae8d3fb807232146840a3b0d02b0bfc63931787f152ec10d65db384a0cb77033a67c2da401806bcab5747ab521e79d06375991abf48a8f5050c162bdc9d906a
-
SSDEEP
24576:GCYMmqdWzLA1wf/a1YhfpW3oEHgpMaTqfJ8FMmoZ7fCn8Igl4Ys:GwXs01o0YVfEHMM9fiZoZ7Gg
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
68924404cf927bee9003fc2b50364ec848a75420f900b232bdf19571ef56c58c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.3MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 48KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE