Behavioral task
behavioral1
Sample
c3077c04457594be52cda2321d8b825b40c2cc25f37911bbf9fb1224c8d6be57.exe
Resource
win7-20220812-en
General
-
Target
c3077c04457594be52cda2321d8b825b40c2cc25f37911bbf9fb1224c8d6be57
-
Size
647KB
-
MD5
0f626b7c4924be8515d847b2b02d8c60
-
SHA1
0f3e19940040968bc1b0ddead2bc4058f8ca93da
-
SHA256
c3077c04457594be52cda2321d8b825b40c2cc25f37911bbf9fb1224c8d6be57
-
SHA512
27fb67f6d6c756799072158cca73bf399a1d56d9a93c4899426a18b1733745b5bccbbb597b6c67cacb82c2305dde6af90063f0cc67c81b7068d53e0b1b6bf6db
-
SSDEEP
12288:npSrU96QtnXwCz5YAq8MAs72yxJ4VuDRUF+2hRmlmWGI59myqx7FJxP5tslgz+2C:nmU9htXQFxOVuFWFygLImy4smzQ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c3077c04457594be52cda2321d8b825b40c2cc25f37911bbf9fb1224c8d6be57.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 94KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 538KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE