Behavioral task
behavioral1
Sample
e1d3c004c91a5b992981badbc71f73cf66d4cb641a6eeab15ae18a20e8196a9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1d3c004c91a5b992981badbc71f73cf66d4cb641a6eeab15ae18a20e8196a9f.exe
Resource
win10v2004-20220901-en
General
-
Target
e1d3c004c91a5b992981badbc71f73cf66d4cb641a6eeab15ae18a20e8196a9f
-
Size
148KB
-
MD5
4a12405dd1a39b4fcc1aee8225b9ccb0
-
SHA1
5ee201e871761b58364b0c04a23b7edd127d3d22
-
SHA256
e1d3c004c91a5b992981badbc71f73cf66d4cb641a6eeab15ae18a20e8196a9f
-
SHA512
94d145e72d71c0c3f18530e407e1d47adf974a54ff7ebbf5c7c741e9ca14796ba4078cfb09d221f0834b474c54e073fc56a0b8ed0852eb527fb0bafb05d86485
-
SSDEEP
3072:r5GzISZsc5f3+Jg/P4Ovs/XLnxsDaM7Asid9ovvlG/K83M:7SZs2f3CgEXLnkd7AsidYE/K83M
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e1d3c004c91a5b992981badbc71f73cf66d4cb641a6eeab15ae18a20e8196a9f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE