Behavioral task
behavioral1
Sample
087a99ed056076cab7a584a48dd55d897d2ddcbfe0798ddbe5bc5329b7763b70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
087a99ed056076cab7a584a48dd55d897d2ddcbfe0798ddbe5bc5329b7763b70.exe
Resource
win10v2004-20220812-en
General
-
Target
087a99ed056076cab7a584a48dd55d897d2ddcbfe0798ddbe5bc5329b7763b70
-
Size
154KB
-
MD5
2a5aece1d1353c7dd6a2bffd312f0796
-
SHA1
3649b5fd68b9bf107b98bc7edd4251666c6f8423
-
SHA256
087a99ed056076cab7a584a48dd55d897d2ddcbfe0798ddbe5bc5329b7763b70
-
SHA512
178c105c6727bb22f8bb366c83a3207a7313805c420fc6607ea99b59ccd17a6cab7962c1e81e16656a112919e71b2d2471c2b3ee8cd0568a2a9eb961ebb0a1ef
-
SSDEEP
3072:IqlRbxdLbHC6UWaCeK5v409Kyf1kHTK+6pKGuz8LOu8GPiHfOyrJjlMm+h:IqlJnC6cij9KyfiB6/uaOt3ftVjlMVh
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
087a99ed056076cab7a584a48dd55d897d2ddcbfe0798ddbe5bc5329b7763b70.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 135KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE