Behavioral task
behavioral1
Sample
da6dee8f1b21242dcffc436e61e63db6968af3fe791701ad1b57d2e2dc64eb9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da6dee8f1b21242dcffc436e61e63db6968af3fe791701ad1b57d2e2dc64eb9f.exe
Resource
win10v2004-20220812-en
General
-
Target
da6dee8f1b21242dcffc436e61e63db6968af3fe791701ad1b57d2e2dc64eb9f
-
Size
183KB
-
MD5
801cee838ddfdbf27710c200f7da65a1
-
SHA1
19c83e411c0dae5ea9e644688b47b4e7af00adb4
-
SHA256
da6dee8f1b21242dcffc436e61e63db6968af3fe791701ad1b57d2e2dc64eb9f
-
SHA512
1943ef91e24a25437f9d8f97e04c125dcbf16703c30acb54696c574ab73c6d54120470f21ff815bc86111a2050fc9eed191bcb1c3aa87fa2e66cfea0f0175b35
-
SSDEEP
3072:rimsXXK9HRTOeriRfP6pXfSb0dspqc5oY0htVFAHT11Ual21Cxcs0HKAH057kyJ6:riMmXRH6pXfSb0ceR/VFAHh1kgcs0HW8
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
da6dee8f1b21242dcffc436e61e63db6968af3fe791701ad1b57d2e2dc64eb9f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 154KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE