Behavioral task
behavioral1
Sample
77b967511928326d07f6f642cbfb25f5e9f2dbb9e6b4bc9c0f3de07a10baaeaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77b967511928326d07f6f642cbfb25f5e9f2dbb9e6b4bc9c0f3de07a10baaeaf.exe
Resource
win10v2004-20220901-en
General
-
Target
77b967511928326d07f6f642cbfb25f5e9f2dbb9e6b4bc9c0f3de07a10baaeaf
-
Size
295KB
-
MD5
1b0c462819dca63067b4b41a056bf16a
-
SHA1
3fad4f5df89df676fde96ff82f0c01c17746b92c
-
SHA256
77b967511928326d07f6f642cbfb25f5e9f2dbb9e6b4bc9c0f3de07a10baaeaf
-
SHA512
ae593311edf95c18d0e5eee49079590ef42d8f259f3564992965f6410bd699902495a2eda75c140256c77dc15a5f9b26431df9d33beb42d85e23bd466800361e
-
SSDEEP
6144:20qniEYcU5T0tkowYnpmyb15sK/Kxa1J8pKpheC/tFZBzB+m:Cnn6G1pmyb15VCxWJ8AFZZUm
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
77b967511928326d07f6f642cbfb25f5e9f2dbb9e6b4bc9c0f3de07a10baaeaf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 260KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE