Behavioral task
behavioral1
Sample
fb633ea106abe972a214e8e8a944d8b3fd634476eee0b66c5eec95bb0776d940.exe
Resource
win7-20220901-en
General
-
Target
fb633ea106abe972a214e8e8a944d8b3fd634476eee0b66c5eec95bb0776d940
-
Size
646KB
-
MD5
06a0e79a0a68ade4f45414dba7093d50
-
SHA1
080f957743ef32a6b7ccfbcc3d7e3f6c0e607ca3
-
SHA256
fb633ea106abe972a214e8e8a944d8b3fd634476eee0b66c5eec95bb0776d940
-
SHA512
9fe7ed2b7be53b47ea940b0ee886e469cca9ea129ddd9a7582ebfff909766368b2d6b805923a86dea3d467558fcdc80b9bc02e010d9b4636abfd925348d6e001
-
SSDEEP
12288:JpSrU96QtnJ2hj4cS3xPRBNcLTIPAgGuvv7uBqMrKNziIZb92G3P+mJEzS/uaU+W:JmU9htQCrZ1cLTIP3jytKPt3PEzqUT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fb633ea106abe972a214e8e8a944d8b3fd634476eee0b66c5eec95bb0776d940.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 94KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 536KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE