Behavioral task
behavioral1
Sample
960d8663415303c6facd1a1eff598528ab4d5bc4f0eaaad8ce17f66e4b751d0a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
960d8663415303c6facd1a1eff598528ab4d5bc4f0eaaad8ce17f66e4b751d0a.exe
Resource
win10v2004-20220812-en
General
-
Target
960d8663415303c6facd1a1eff598528ab4d5bc4f0eaaad8ce17f66e4b751d0a
-
Size
721KB
-
MD5
117f68f259256d71ea09bf4a0928900a
-
SHA1
e127cf56f49c0b945eac84ab29517a342eca2a8a
-
SHA256
960d8663415303c6facd1a1eff598528ab4d5bc4f0eaaad8ce17f66e4b751d0a
-
SHA512
26906ac2727135e9823b5e2448b18862e97ebfadb0139440390647701357900770ad9c523df635dff55a994c3ec2322c1ca04537a53e62e8530add31a633e618
-
SSDEEP
12288:luXz+6yYrqyTh+jOsxgRISEyKrASuU8luf8xu1/xzQHeHy3Vz/oQDTgzC:8+6rhqNudSutlmsw/xzQ+rQDT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
960d8663415303c6facd1a1eff598528ab4d5bc4f0eaaad8ce17f66e4b751d0a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 263KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 425KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE