Behavioral task
behavioral1
Sample
message.txt .exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
message.txt .exe
Resource
win10v2004-20220812-en
General
-
Target
904970ca0e4d12a6d4950bc58b9a9f1f
-
Size
171KB
-
MD5
904970ca0e4d12a6d4950bc58b9a9f1f
-
SHA1
32cdabb32b4859820380a841a99837c7188ebcbb
-
SHA256
dd10a6df4ab46a4fa29bb12d10baf0c6e1aabba66d19e28245839babcc8367e5
-
SHA512
28bed6d6fa9bff45722261b7091263a8e1d34c7111ecbfa47fe84442072f36c6117585bead84bb147ef149cff3761b58bde0087b190870664d284c268a2ad1d7
-
SSDEEP
3072:inYDcyRX5vv4AAK4gT2YLw3x+WY0qZm78LtCvMt5Ws9XXJI1a:aoJn4AvT2Y04yh7LvMtQYX5I1a
Malware Config
Signatures
-
resource yara_rule static1/unpack003/message.txt .exe aspack_v212_v242
Files
-
904970ca0e4d12a6d4950bc58b9a9f1f.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
message.zip.zip
-
message.txt .exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 37KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE