Behavioral task
behavioral1
Sample
aaaba9cfc2fca060c5d6d62b77d18aadeb8d55075d8da5ac8ac28450b51da5b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaaba9cfc2fca060c5d6d62b77d18aadeb8d55075d8da5ac8ac28450b51da5b7.exe
Resource
win10v2004-20220901-en
General
-
Target
aaaba9cfc2fca060c5d6d62b77d18aadeb8d55075d8da5ac8ac28450b51da5b7
-
Size
368KB
-
MD5
33cc8c85e688d6bae70881c3c599d3e0
-
SHA1
e7971c98ec10a9ce2ba425df55e3d1d6fbf08a11
-
SHA256
aaaba9cfc2fca060c5d6d62b77d18aadeb8d55075d8da5ac8ac28450b51da5b7
-
SHA512
6fb5084263d36d9f34e291fc0aaf5280ac61185716b8ec0bf3cec0820aa22f5ca1bd63cbdfb31c8ca8706a5e57ee2fcc2eea7707bd795d83ee69aecbf607162e
-
SSDEEP
6144:hlpCHYPEdzzXlgmvPeJ3dwv/IS2aMX+4a7MufRi3a93NyWz7fbp1CYRLSfY/HnS4:hlpCbV/3ed2vZDEByuIQ+/pV/nSfA
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
aaaba9cfc2fca060c5d6d62b77d18aadeb8d55075d8da5ac8ac28450b51da5b7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 243KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.anzu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE