Behavioral task
behavioral1
Sample
44bd993c0fbd571cf7f3ae2ababbb32448d952e48f91e695c1f987ea32b6e951.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44bd993c0fbd571cf7f3ae2ababbb32448d952e48f91e695c1f987ea32b6e951.exe
Resource
win10v2004-20220812-en
General
-
Target
44bd993c0fbd571cf7f3ae2ababbb32448d952e48f91e695c1f987ea32b6e951
-
Size
5.2MB
-
MD5
6cd8920a4c9d50e2ec0cac1c61c2aa90
-
SHA1
403cfccb3ffe70456d72f212e815c8feda032239
-
SHA256
44bd993c0fbd571cf7f3ae2ababbb32448d952e48f91e695c1f987ea32b6e951
-
SHA512
ba080aff522782f619bc0e8a1c8917288b7d5b1d3dd7a7aff23cf96ffa5d0fb4248645fec1e570e5ea353fe0c95d3e19efcdf3ce8ecd71f31c96decccfd3622a
-
SSDEEP
98304:b2pHREnz5fg5bVxrA9lSI0RfSl6lOcBFJ+afYGO71Q9JX:b2RaSFVxM9EIUfcujIoOxs
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
44bd993c0fbd571cf7f3ae2ababbb32448d952e48f91e695c1f987ea32b6e951.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.3MB - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 35KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 240KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 22.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE