Behavioral task
behavioral1
Sample
5210c3babc13182beb327b6cc16fd8189783ddd87af5b1ed817fee8721ba71a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5210c3babc13182beb327b6cc16fd8189783ddd87af5b1ed817fee8721ba71a0.exe
Resource
win10v2004-20220901-en
General
-
Target
5210c3babc13182beb327b6cc16fd8189783ddd87af5b1ed817fee8721ba71a0
-
Size
200KB
-
MD5
a3aa8aaaf354ba561af99d0f71d227a0
-
SHA1
9e9bdf30dc1a89464508089cd21b1f343b0777c6
-
SHA256
5210c3babc13182beb327b6cc16fd8189783ddd87af5b1ed817fee8721ba71a0
-
SHA512
59570bfaa9a5f8b7ee7f43bd3ef41be056a31e831e005db99ac85a650530c4d605cf7f854af97f6d00a75027d71d3457a871a530ff2d07fc142240dfc4dbbf44
-
SSDEEP
6144:dgCWIYMphOUiXITB2XM+OE9olTkhgDergC2Of3j:dP2MqUyaB+M+mkhzkC2s3j
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
5210c3babc13182beb327b6cc16fd8189783ddd87af5b1ed817fee8721ba71a0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 150KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE