Behavioral task
behavioral1
Sample
f3bbac9ad974c7fd329f93893c7a365831ce2e00f967fbf4eae7f702d0fd7374.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3bbac9ad974c7fd329f93893c7a365831ce2e00f967fbf4eae7f702d0fd7374.exe
Resource
win10v2004-20220812-en
General
-
Target
f3bbac9ad974c7fd329f93893c7a365831ce2e00f967fbf4eae7f702d0fd7374
-
Size
6.1MB
-
MD5
b715f182234faee376a807e72e503b35
-
SHA1
018ec314b35a5442f500d2a5002a7f49a121d419
-
SHA256
f3bbac9ad974c7fd329f93893c7a365831ce2e00f967fbf4eae7f702d0fd7374
-
SHA512
607ee501694658b80a72df698bc8808ad0694817bb8f8a803f85cf11673dd5ea851b94e214a74ca81c21bcd4fedc00fc75ef7c4907f93c7f512847d5503e8937
-
SSDEEP
196608:fyyEfKUknVZ3kegDpl6gv/eKnD/GGvb8cD96CpmMRZHoK:fyyEfKNZ3kegr6gvVnD/GWocB62VPD
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f3bbac9ad974c7fd329f93893c7a365831ce2e00f967fbf4eae7f702d0fd7374.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 421KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 29KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE