Behavioral task
behavioral1
Sample
2de5a662a68b90acc06153fd94f926d9dc6e77007a0033c56df0e0eed0fabdc8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2de5a662a68b90acc06153fd94f926d9dc6e77007a0033c56df0e0eed0fabdc8.exe
Resource
win10v2004-20220901-en
General
-
Target
2de5a662a68b90acc06153fd94f926d9dc6e77007a0033c56df0e0eed0fabdc8
-
Size
1.7MB
-
MD5
2a8ec8d195f193185716123594a9a776
-
SHA1
21085c6b1607f6aa2654683aaec6515e9cb58f07
-
SHA256
2de5a662a68b90acc06153fd94f926d9dc6e77007a0033c56df0e0eed0fabdc8
-
SHA512
f9783f1f3f09525e264dbcc969a9b93ea3f996ba75c46e206c8d9d050e648af748a3bf176b04d07f653176fff06168277b2e9bd0688b942076a4db7d79dbb4c1
-
SSDEEP
49152:3L/lNPb3n9z9h0IN8uq3ACHtEC0vQWJ3VoB+tvptx/6E:brLn9z9h0IN8uq39x0vz37tvME
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
2de5a662a68b90acc06153fd94f926d9dc6e77007a0033c56df0e0eed0fabdc8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.3MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 65KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE