Behavioral task
behavioral1
Sample
afd6a0fed6c2a0d50af4617df8de567cdf06e0b26e11a3f534cf3b0596b02bc5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afd6a0fed6c2a0d50af4617df8de567cdf06e0b26e11a3f534cf3b0596b02bc5.exe
Resource
win10v2004-20220812-en
General
-
Target
afd6a0fed6c2a0d50af4617df8de567cdf06e0b26e11a3f534cf3b0596b02bc5
-
Size
69KB
-
MD5
a13ab9196fc782507f745ea1390d2c90
-
SHA1
1d11a2cdfdfba6e772eb949e859f4e6bdaeacec1
-
SHA256
afd6a0fed6c2a0d50af4617df8de567cdf06e0b26e11a3f534cf3b0596b02bc5
-
SHA512
26f50e9f2279539b391729c562f5fc1d888a5445bd50036fac39a2a5870e909ec213dbc2b1bc3a9c365144e5b1a0a4d1a42a044d2d2e367f0b97a68c0e87708c
-
SSDEEP
768:r5Gsq/XQGcoGVzUDWbcvZOkglUWJY3ggxfha5a2qgbgrzfBZ9x1p5E:r5GD/XPgQGcvZORS3g+v2vbgfBV9E
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
afd6a0fed6c2a0d50af4617df8de567cdf06e0b26e11a3f534cf3b0596b02bc5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE