Behavioral task
behavioral1
Sample
d46040b5ef18812d715ff58c7f912401a2c8639c772c09df59ce47093785ba4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d46040b5ef18812d715ff58c7f912401a2c8639c772c09df59ce47093785ba4b.exe
Resource
win10v2004-20220812-en
General
-
Target
d46040b5ef18812d715ff58c7f912401a2c8639c772c09df59ce47093785ba4b
-
Size
710KB
-
MD5
0b149495da33786da24d1f5066073490
-
SHA1
8ce4343d4e2a3041ad50e26510aec133ca6e2aba
-
SHA256
d46040b5ef18812d715ff58c7f912401a2c8639c772c09df59ce47093785ba4b
-
SHA512
28ffd7a608db82cde738eb44b0c1bcc0e9c9220eced8cd8d5fc12912673838cce1147695fb2c984daa0793d76288d33b2b25d74dbd96b452d5a68a12b846a1c2
-
SSDEEP
12288:d3TdtLW5WIj1YSSdFxd3TdtLW5WIj1YSSdFx0:FDsj1dEVDsj1dE
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
d46040b5ef18812d715ff58c7f912401a2c8639c772c09df59ce47093785ba4b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vc++ Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 409KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE