Behavioral task
behavioral1
Sample
2b5b7b832883b18cde00583c617be8a5bec1d9f375f937e65ae1d00854c46ef0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2b5b7b832883b18cde00583c617be8a5bec1d9f375f937e65ae1d00854c46ef0.exe
Resource
win10v2004-20221111-en
General
-
Target
2b5b7b832883b18cde00583c617be8a5bec1d9f375f937e65ae1d00854c46ef0
-
Size
268KB
-
MD5
1d11e611f4fb55b6b85caee53c0356e6
-
SHA1
91168c50d29841330e627f3a52958044ce958488
-
SHA256
2b5b7b832883b18cde00583c617be8a5bec1d9f375f937e65ae1d00854c46ef0
-
SHA512
51e9464c41b0cd35005373e3c45c11b82b79758f61a317dcc67b11a282cb1cbebbbecd19a676b6dd53dc2c1a71951a16593b2853826aec0cdab2da60294c2aef
-
SSDEEP
6144:5ocMD9L6Ro5oso1IwJs3mb6plI/7SCNG:5tMDF6RomTGwJd64uCA
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
2b5b7b832883b18cde00583c617be8a5bec1d9f375f937e65ae1d00854c46ef0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 214KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE