Behavioral task
behavioral1
Sample
5e13655ff81bd9711fc3b4c963abfa107398c0e1da7988a8a244f3dd0b18ebaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e13655ff81bd9711fc3b4c963abfa107398c0e1da7988a8a244f3dd0b18ebaf.exe
Resource
win10v2004-20220812-en
General
-
Target
5e13655ff81bd9711fc3b4c963abfa107398c0e1da7988a8a244f3dd0b18ebaf
-
Size
3.5MB
-
MD5
e30fdc4998d12739444ff5e184853439
-
SHA1
3e86439bf7d1cfd210b86506651ff08b1ae09479
-
SHA256
5e13655ff81bd9711fc3b4c963abfa107398c0e1da7988a8a244f3dd0b18ebaf
-
SHA512
8f5374d6e27c9348222f22171efd82d06f81faf5c14e9acccc7cddf24eae13488abd4ef7eae780bfaebda704591e84996c78bd0563d1146e984c2666a272ad64
-
SSDEEP
49152:R0kwZqmifdfmDL8mVNxaaa4DfzLMdFgfY5TpOHhRx3MmCpvNegHFZSZF8fibk6lg:R0zHGdfq3wbtOL9M/VBHFZ+F9xy
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
5e13655ff81bd9711fc3b4c963abfa107398c0e1da7988a8a244f3dd0b18ebaf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.8MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 53KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 540KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE