Behavioral task
behavioral1
Sample
document.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
document.exe
Resource
win10v2004-20220812-en
General
-
Target
00bfd5fb6ab2cb98a618567665bace89
-
Size
179KB
-
MD5
00bfd5fb6ab2cb98a618567665bace89
-
SHA1
6f79fd7c031bcfff8022d66d9637301427724ff4
-
SHA256
6f1213928852dee6ebfb9868a8c3718ddff88ec1b557b4e3c516fce5e1a9e7bb
-
SHA512
299510b1d6c997b8409f63faf1995ec6a1453866726c33d39a6a995ae4b1f30c12e1565401f001df5ed3f095d8ebcf0de7b001ba7be0182f606b65cc59dea152
-
SSDEEP
3072:NJNx/F0VGuhBYyIWMOeJhA2yOBGhGKMtIZaXQqrDFmwJibZceHkIox8iZz5uNU:NaBD45JK2yKGhGqZWDFbJiMxTZQNU
Malware Config
Signatures
-
resource yara_rule static1/unpack005/document.exe aspack_v212_v242
Files
-
00bfd5fb6ab2cb98a618567665bace89.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
document.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdpack Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
email-plain-1.txt