Behavioral task
behavioral1
Sample
a3d739a57909d1d0b8ad0579f5ad4889ac89a70e34705fc87295314a1e3a2394.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3d739a57909d1d0b8ad0579f5ad4889ac89a70e34705fc87295314a1e3a2394.exe
Resource
win10v2004-20220901-en
General
-
Target
a3d739a57909d1d0b8ad0579f5ad4889ac89a70e34705fc87295314a1e3a2394
-
Size
454KB
-
MD5
c291544365271a9519c7b22478d9773c
-
SHA1
a773129253b480200303e584b6dcc834f3618cb9
-
SHA256
a3d739a57909d1d0b8ad0579f5ad4889ac89a70e34705fc87295314a1e3a2394
-
SHA512
d2dcfd47c7ea24980c8636b7e56c033c644f26f7fc6b91e88fd55c5f554f7b92e7dbaf75c543aae3c801a68724cb06861ccf291772113ff7f6177e2a1a7f853f
-
SSDEEP
6144:bfrs2c+mxkPVKAzWDdkU9VFV0fVrhntme/sURbOzdbT56OB8mEK96Ctp:bfrs2c+fWDKhfNz9RbOO4CCt
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a3d739a57909d1d0b8ad0579f5ad4889ac89a70e34705fc87295314a1e3a2394.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 247KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE