Behavioral task
behavioral1
Sample
a0f9b5d3aa6b0be9c3efd5a40587cf10d0afdbeda174fff0613d32391d4ed5d2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a0f9b5d3aa6b0be9c3efd5a40587cf10d0afdbeda174fff0613d32391d4ed5d2.exe
Resource
win10v2004-20220901-en
General
-
Target
a0f9b5d3aa6b0be9c3efd5a40587cf10d0afdbeda174fff0613d32391d4ed5d2
-
Size
595KB
-
MD5
0e0f15e2930c8c099799d98ff97d8adb
-
SHA1
04d691e7d90fd2c339f0a08a69b426f0deb7ea89
-
SHA256
a0f9b5d3aa6b0be9c3efd5a40587cf10d0afdbeda174fff0613d32391d4ed5d2
-
SHA512
d1a9af74aed91e412714faf42d2c81f966f7978108e8fc28e01f257eb34aa459b22c600a5cf0c326ec3000cfca5bb4258eea931ef8184caf2774b2aa9dddc046
-
SSDEEP
12288:lAHWgKie267njcAaRkOlIIH2pVNAapVeEwcUjw/HpxT:9gKq67nQzkDNAapVebbw/J1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a0f9b5d3aa6b0be9c3efd5a40587cf10d0afdbeda174fff0613d32391d4ed5d2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 479KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE