Behavioral task
behavioral1
Sample
c832089dba07acc6ae17b06556c0bf78f62e14bc9333f6b21970a0af652d2434.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c832089dba07acc6ae17b06556c0bf78f62e14bc9333f6b21970a0af652d2434.exe
Resource
win10v2004-20220901-en
General
-
Target
c832089dba07acc6ae17b06556c0bf78f62e14bc9333f6b21970a0af652d2434
-
Size
77KB
-
MD5
a27b84c38cb44e32415927bfbd28afb0
-
SHA1
54a3b7a03f3a68ca433ce6fb49ae0e662211e1b7
-
SHA256
c832089dba07acc6ae17b06556c0bf78f62e14bc9333f6b21970a0af652d2434
-
SHA512
45b12af9d61eff39a09c15777062603597cdd5556f1ef8fac9d296f5bd36b1f56b786b385d89f0a2f61043fde2fa459b165a46677030f194fbb01cd9a246e646
-
SSDEEP
1536:r5GD/XPgQGcvZORS3g+81td5Olwhm/ieRn+ILDk/T92s+uF:r5GzISZst1ElP/ieRn+sDk7922F
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c832089dba07acc6ae17b06556c0bf78f62e14bc9333f6b21970a0af652d2434.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE