Behavioral task
behavioral1
Sample
29910df773114934e53ece20e5f461f6dd93cd877cd42831c7b802e170b96799.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29910df773114934e53ece20e5f461f6dd93cd877cd42831c7b802e170b96799.exe
Resource
win10v2004-20220901-en
General
-
Target
29910df773114934e53ece20e5f461f6dd93cd877cd42831c7b802e170b96799
-
Size
340KB
-
MD5
4d4e23d84d3d73dcdebe77956b737b20
-
SHA1
cc72c701f0b9a0f88e34b896658bac68f8e45ee8
-
SHA256
29910df773114934e53ece20e5f461f6dd93cd877cd42831c7b802e170b96799
-
SHA512
bb90c2966890cc9ced3de159fa4fdda1899c4c57bb474b51767f444dee2e89b6951242fe4e6fdc75dea9ab34087e19044cdba27da9480f309c71f8e128b5d54d
-
SSDEEP
6144:riMmXRH6pXfSb0ceR/VFAHh1kgcs0HW1kyApep9P+qW418CRRVMMMMMM2MMMMMc:ZMMpXKb0hNGh1kG0HWnAgp9WqZ1zRRad
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
29910df773114934e53ece20e5f461f6dd93cd877cd42831c7b802e170b96799.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 154KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE