Behavioral task
behavioral1
Sample
6129bcbac6da946c834c8a6a9789573f61535c48c7ecf62a279de1245cf7b5d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6129bcbac6da946c834c8a6a9789573f61535c48c7ecf62a279de1245cf7b5d1.exe
Resource
win10v2004-20220812-en
General
-
Target
6129bcbac6da946c834c8a6a9789573f61535c48c7ecf62a279de1245cf7b5d1
-
Size
288KB
-
MD5
0c6d60e4c6c56aee978578e98bddc310
-
SHA1
ce2050e200e5c91602871f63d1b07ab6a783ae86
-
SHA256
6129bcbac6da946c834c8a6a9789573f61535c48c7ecf62a279de1245cf7b5d1
-
SHA512
254ade73d0c7a1fc91df094ebfbc5bd5f418f482b35fa36a91969ea5f2ed8858727155a294582c3526a53f926a1ea94f0c57c49c28943f83abd8cdc8cfec0559
-
SSDEEP
6144:lV84xoCuuAZ5Xd8BumkyptZJ3s/in87VTc92OyQLubrMfruo:lJxoCuj3Xd8Bumkg8/i8ZTxrQqHMfD
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
6129bcbac6da946c834c8a6a9789573f61535c48c7ecf62a279de1245cf7b5d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 237KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE