Behavioral task
behavioral1
Sample
4129209d7ac787bfaba657c5ac0913eb6993b9c69cd717a2872856f98fab3717.exe
Resource
win7-20220812-en
General
-
Target
4129209d7ac787bfaba657c5ac0913eb6993b9c69cd717a2872856f98fab3717
-
Size
642KB
-
MD5
0c98ff0cd0ac9db2dd9a6be01cffa650
-
SHA1
b0ff9c036a88de9eb6f03124bed6168b9301c4de
-
SHA256
4129209d7ac787bfaba657c5ac0913eb6993b9c69cd717a2872856f98fab3717
-
SHA512
48a2aed457586cd51b9939ff78e0948afc8ac867140938b26922b3a55804353072c9b75b99b1230e493931be5ba8d43f9e257f835c6957282d124dc3281e6a3f
-
SSDEEP
12288:bpSrU96Qrwpu+C+SdAuE6JMJZ0tybLqCUpkuHuvzWc6FFFruN6Cy4nMiw7NNbKXb:bmU9hrwsdlwCtybmDSuHuvzWJFJkydiT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
4129209d7ac787bfaba657c5ac0913eb6993b9c69cd717a2872856f98fab3717.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 94KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 533KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE