Behavioral task
behavioral1
Sample
29f02338db4c1b6271ad96c9ed9f0792689e51ac1162e5df70896dc5a9bf25b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29f02338db4c1b6271ad96c9ed9f0792689e51ac1162e5df70896dc5a9bf25b3.exe
Resource
win10v2004-20220901-en
General
-
Target
29f02338db4c1b6271ad96c9ed9f0792689e51ac1162e5df70896dc5a9bf25b3
-
Size
776KB
-
MD5
a25c364774cd21c9cbe2fbee0dd591b0
-
SHA1
f6b57cc9f38b16010397d019220c8ea2317d4269
-
SHA256
29f02338db4c1b6271ad96c9ed9f0792689e51ac1162e5df70896dc5a9bf25b3
-
SHA512
411d793681d491de225f4dd35108be19efc3ad8692c95aeedb82693ad5ce06804fc45c72c1e72167f39441686ff652b5d344466d26a6cd37c83d371f367039c8
-
SSDEEP
6144:ePXhEzi2xXBX8HGYWj7LCZzVXuPoTWR0VaqpSvy7H1RvYFO:ePCGm5YFWjClVuPoThHp97H1R
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
29f02338db4c1b6271ad96c9ed9f0792689e51ac1162e5df70896dc5a9bf25b3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 258KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE