Behavioral task
behavioral1
Sample
d59afdfb625834d5834c0d47cbbbc680eb36d17a3d67aed47449c203e86cdd02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d59afdfb625834d5834c0d47cbbbc680eb36d17a3d67aed47449c203e86cdd02.exe
Resource
win10v2004-20221111-en
General
-
Target
d59afdfb625834d5834c0d47cbbbc680eb36d17a3d67aed47449c203e86cdd02
-
Size
1.6MB
-
MD5
9d18136f037b2db72d147c5c22952c25
-
SHA1
731b7728cef60bd89ae18f361cb723b2e95da655
-
SHA256
d59afdfb625834d5834c0d47cbbbc680eb36d17a3d67aed47449c203e86cdd02
-
SHA512
ae5b4b2bb8043796625eccd62782fa7bb24c1c5f1e2155e7fef146071bd380eb8546dc0faacdd12b8951d0345760fba20ad203e818e39670ae311bc80a55aaee
-
SSDEEP
49152:VnoRpssOedkNO6B2BG7XX5l5K9ti1h3zSd:Vn6p7L67hK9ti1Q
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
d59afdfb625834d5834c0d47cbbbc680eb36d17a3d67aed47449c203e86cdd02.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 506KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE