Behavioral task
behavioral1
Sample
b40b6623b80f26a173649f9adcdddee232f078e88180e7a00083c08d599263de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b40b6623b80f26a173649f9adcdddee232f078e88180e7a00083c08d599263de.exe
Resource
win10v2004-20220812-en
General
-
Target
b40b6623b80f26a173649f9adcdddee232f078e88180e7a00083c08d599263de
-
Size
2.8MB
-
MD5
c405106829a41975f5b659ea2017c92f
-
SHA1
3fce75ed415b44c228db8a9df5dff57e22a90e6e
-
SHA256
b40b6623b80f26a173649f9adcdddee232f078e88180e7a00083c08d599263de
-
SHA512
5be20bcc5f518d1a5c344f895c437be5f00f9ef93c5a3c313d6cd90a55f6d0333aa2101073fcc982847b3bf4ab82d88257d1443bb8d0dd9179d966d8f65b7103
-
SSDEEP
49152:dfHpsl0Z222M15WMZCS9ntc4yYsGV1Yrv0FFbuXrldPX6ZRoWL2bZK374rPRQW:BCuZ2QHPtxyRG1FFbuXr7PM3L2NWwp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b40b6623b80f26a173649f9adcdddee232f078e88180e7a00083c08d599263de.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.4MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 76KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE