Behavioral task
behavioral1
Sample
7cb26ae6213c00fa70f1000550b516e22d7f3544f722424918d1b4954452e52f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7cb26ae6213c00fa70f1000550b516e22d7f3544f722424918d1b4954452e52f.exe
Resource
win10v2004-20220812-en
General
-
Target
7cb26ae6213c00fa70f1000550b516e22d7f3544f722424918d1b4954452e52f
-
Size
1.2MB
-
MD5
9a3fc5ec3c91df1faba230b15951991e
-
SHA1
63f19684cd7eb582a8cdf0a9412bceac2565ebb8
-
SHA256
7cb26ae6213c00fa70f1000550b516e22d7f3544f722424918d1b4954452e52f
-
SHA512
4e100954fa97ae9007d4df536bcf1a821196f8a4c5128a822ae83ef76610bb8ec25ef1776884ee03c11f00a24147f61326dd358517f4481665948c92fd99a143
-
SSDEEP
24576:zq9gFrPpRYBn0HEEekc2pXqhp1Qqqvf7/qQujaReOBZzTgGKzy/XG8V8Z:29gdpRWn0tekc6yQ9T/qJeRVjtKzy/XP
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
7cb26ae6213c00fa70f1000550b516e22d7f3544f722424918d1b4954452e52f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.1MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 29KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE