Behavioral task
behavioral1
Sample
message.txt .exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
message.txt .exe
Resource
win10v2004-20220812-en
General
-
Target
2171b9d40a35a1c1d51907987259ac19
-
Size
173KB
-
MD5
2171b9d40a35a1c1d51907987259ac19
-
SHA1
7173a23e5c26efea680fadf2f1b4b43147938c38
-
SHA256
6881ae66eb3a1a2303a3a224ba586f58560360dc0316d7944a2b321d1b678231
-
SHA512
ea6f14c42046f481a1adeda29595f7740b5cad3b1763157a7c511afc8d3ce76f16fe4b3fee873c737a0d6d707549fd72c80bda6c865143c1154b5e1db2a22cd5
-
SSDEEP
3072:NDcyRX5vv4AAK4gT2YLw3x+WY0qZm78LtCvMt5Ws9XXJI10:OoJn4AvT2Y04yh7LvMtQYX5I10
Malware Config
Signatures
-
resource yara_rule static1/unpack004/message.txt .exe aspack_v212_v242
Files
-
2171b9d40a35a1c1d51907987259ac19.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
message.zip.zip
-
message.txt .exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 37KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE