Behavioral task
behavioral1
Sample
7361c558d18d7a4819b7b6f101423035da1f1b474c963dd76595664d454ccdcb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7361c558d18d7a4819b7b6f101423035da1f1b474c963dd76595664d454ccdcb.exe
Resource
win10v2004-20220812-en
General
-
Target
7361c558d18d7a4819b7b6f101423035da1f1b474c963dd76595664d454ccdcb
-
Size
469KB
-
MD5
0f4adee7c71a30c5dcd21a1f8ea9e9f2
-
SHA1
8553ad022345d92b594746da7822d583b70f4217
-
SHA256
7361c558d18d7a4819b7b6f101423035da1f1b474c963dd76595664d454ccdcb
-
SHA512
5fd73cc5a25df8a50efa56460c346608d6502843e95cf22cc8fb8c3ff930437e8b0737ba84fc703856b406403261514d8319ca1fcb2fd98d6d945b74f745204e
-
SSDEEP
12288:XFVGyau37ocv3u/pRv1z0eV3oPYqckmUyPWhF7DNbBFt3CSTCllF4:XHGfu37osuhRvPGPYqiinNb5SEalF4
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
7361c558d18d7a4819b7b6f101423035da1f1b474c963dd76595664d454ccdcb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 419KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE