Behavioral task
behavioral1
Sample
aded03e068f0401383da70e47b961e22d1a31e9c3ab2195cd4cecd6c447d699e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aded03e068f0401383da70e47b961e22d1a31e9c3ab2195cd4cecd6c447d699e.exe
Resource
win10v2004-20220812-en
General
-
Target
aded03e068f0401383da70e47b961e22d1a31e9c3ab2195cd4cecd6c447d699e
-
Size
1.8MB
-
MD5
54933042d5cd20a16b645a9fefbf2c78
-
SHA1
2ce69136d6b43724d9114912031f69ed97d08bb1
-
SHA256
aded03e068f0401383da70e47b961e22d1a31e9c3ab2195cd4cecd6c447d699e
-
SHA512
31c74f30314da3129034e8198537f6e2e37f93124c275c793ca3d3bad91d2f3cac9a5b13eb593b959d92610eb2ae534996b1a5d687d5e4d347774a3c14a63461
-
SSDEEP
49152:ZY9BpaXR8Nw6FOdtX4HnjK2CC/vRDDiMepiLCv8B9V5oMMMMMMMMMM:ZY9BARwFWtXSFCKDtsiLvV5oMMMMMMMg
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
aded03e068f0401383da70e47b961e22d1a31e9c3ab2195cd4cecd6c447d699e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 638KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE