Behavioral task
behavioral1
Sample
efab46649ef4701292a32d7eadf8b937a6ca4450433b106c273c357b253cd311.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efab46649ef4701292a32d7eadf8b937a6ca4450433b106c273c357b253cd311.exe
Resource
win10v2004-20220812-en
General
-
Target
efab46649ef4701292a32d7eadf8b937a6ca4450433b106c273c357b253cd311
-
Size
15KB
-
MD5
05b817a7525aa82ba8bb8e04f3ec36e8
-
SHA1
4c306b82f0cc87a9deeacb94907b0b24574580f9
-
SHA256
efab46649ef4701292a32d7eadf8b937a6ca4450433b106c273c357b253cd311
-
SHA512
982fc781d9748ee3fb0cea532d3dcbee6c4c3b4a38a789e4a9e14a0d72d6ad6a920331c8bb80bcffc4af956f138dcf3683cde0adbfc21034c4ca41f5756186bc
-
SSDEEP
384:KbX2v47p5AYqXIWSxq8jlZG9n6Z2mAx6r6+e9Pfqbn1w:0V7DDqXIpxHj/4Dxlha5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
efab46649ef4701292a32d7eadf8b937a6ca4450433b106c273c357b253cd311.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CCM Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
123456 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CCM Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
123456 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CCM Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE