Behavioral task
behavioral1
Sample
d1ad78abffa7e181061ebeb01c5470250131a2616da653d54b957b9d9f6fe0e2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1ad78abffa7e181061ebeb01c5470250131a2616da653d54b957b9d9f6fe0e2.exe
Resource
win10v2004-20221111-en
General
-
Target
d1ad78abffa7e181061ebeb01c5470250131a2616da653d54b957b9d9f6fe0e2
-
Size
3.0MB
-
MD5
935d7228446f1e9ee56a884c40b647a8
-
SHA1
cbea5fad827199054b4d2b448c9359360d9645d7
-
SHA256
d1ad78abffa7e181061ebeb01c5470250131a2616da653d54b957b9d9f6fe0e2
-
SHA512
fc8cb08808776bb5044084cb1314f7ceefe2e8fa1f48a1e428ea61fb87eff2fc8842faf64959b94214ae5d7758a6a53bf6d7141f748ca78b5261cdfa49832d25
-
SSDEEP
98304:jp4Enyny6nfslB78LkKpOOB+kJN14lV0ulf:t4jy6nap6pOOvJcDx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
d1ad78abffa7e181061ebeb01c5470250131a2616da653d54b957b9d9f6fe0e2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 447KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 52KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE