Behavioral task
behavioral1
Sample
464ff3ac9e21920798046d082e656bdae3589efcaa4eecd2f3399b1558f26b2b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
464ff3ac9e21920798046d082e656bdae3589efcaa4eecd2f3399b1558f26b2b.exe
Resource
win10v2004-20220901-en
General
-
Target
464ff3ac9e21920798046d082e656bdae3589efcaa4eecd2f3399b1558f26b2b
-
Size
217KB
-
MD5
a167e8aeb52a96eec4aa8fa263f0c7e0
-
SHA1
b181b782fc5cc03d31f0ec881ed9e02f69881dd4
-
SHA256
464ff3ac9e21920798046d082e656bdae3589efcaa4eecd2f3399b1558f26b2b
-
SHA512
67a90cff144c5f576d62417d20872ece95e43f9597d94e3d340764326ae091a0130b993dd1a1d397865b9ccebebaa77661ac2862d929151d34151be216696deb
-
SSDEEP
6144:tk2365Grnm+EXAE3SxmZWZXviT9KP9UzaQLlTiRf2xPr:tkQsGrm+EQECxmZWZfEKPWz7ZTiRf2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
464ff3ac9e21920798046d082e656bdae3589efcaa4eecd2f3399b1558f26b2b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 164KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE