Behavioral task
behavioral1
Sample
message.scr
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
message.scr
Resource
win10v2004-20220812-en
General
-
Target
593963758c1c184335b9116f0f2eac6b
-
Size
179KB
-
MD5
593963758c1c184335b9116f0f2eac6b
-
SHA1
76f4a4ca93c2c8ba96baa7272ea381c499dbe3bb
-
SHA256
8e65513d2938dcb043d8fe3ba31856f3d85346adf3273ea0ef516d0b495efe2d
-
SHA512
fdf2bf515dc1a5aa3f8761e6dc7177e516eacc12bc7c195b3876ef633ed090df65d1e9f12c1dca27e6572052ad68cda582603a268cc745b607ccf5a6b94c6a03
-
SSDEEP
3072:AJNx/F0VGuhBYyIWMOeJhA2yOBGhGKMtIZaXQqrDFmwJibZceHkIox8iZz5uNn:AaBD45JK2yKGhGqZWDFbJiMxTZQNn
Malware Config
Signatures
-
resource yara_rule static1/unpack004/message.scr aspack_v212_v242
Files
-
593963758c1c184335b9116f0f2eac6b.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
message.scr.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdpack Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XOR Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE