Behavioral task
behavioral1
Sample
b425709b2cddbb614e268a82b716a9720811e3a0bb21a5c7d3e4991e04179abd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b425709b2cddbb614e268a82b716a9720811e3a0bb21a5c7d3e4991e04179abd.exe
Resource
win10v2004-20220812-en
General
-
Target
b425709b2cddbb614e268a82b716a9720811e3a0bb21a5c7d3e4991e04179abd
-
Size
585KB
-
MD5
058dd62d80808ec1d35234a0646120a0
-
SHA1
53fca46f78b884fecff3d6b00b4d41513f695075
-
SHA256
b425709b2cddbb614e268a82b716a9720811e3a0bb21a5c7d3e4991e04179abd
-
SHA512
abf64f80b3654443151049504edd284d65cce52ef7e48d9c28e0ce11f47ccec0af2eb0982a71545f6cdd6a065e0b9bbd0289a38637d509896ff39686838a0774
-
SSDEEP
12288:HRR+gaB45saM1shX80j0p8pGV8ftfklGroECf2U955WMXLDIcT:b+gaB/aMl0oSpGu1fklGr3i2W5EMY8
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b425709b2cddbb614e268a82b716a9720811e3a0bb21a5c7d3e4991e04179abd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 442KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE