Behavioral task
behavioral1
Sample
document.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
document.exe
Resource
win10v2004-20220812-en
General
-
Target
1807cfe0996a4aeba083ae3220104318
-
Size
179KB
-
MD5
1807cfe0996a4aeba083ae3220104318
-
SHA1
d754fd906bdf1d35765e4192e0485a8d1c730dcf
-
SHA256
c583afa9dacaf3e9154e8fa0cafa9f41bc57b4f7af0b02dec5de67bcc9f0abdd
-
SHA512
beb8bd37e282e916f9f2b1de710490afef73e3f5c7894e47a779e0f3aa61f406f954f20e90dd7c17697e55c771b884534284b9334823d6203aca52b4b1ae89f4
-
SSDEEP
3072:7JNx/F0VGuhBYyIWMOeJhA2yOBGhGKMtIZaXQqrDFmwJibZceHkIox8iZz5uNy:7aBD45JK2yKGhGqZWDFbJiMxTZQNy
Malware Config
Signatures
-
resource yara_rule static1/unpack005/document.exe aspack_v212_v242
Files
-
1807cfe0996a4aeba083ae3220104318.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
email-plain-1.txt
-
mail.eml.eml
-
document.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdpack Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
email-plain-1.txt