Behavioral task
behavioral1
Sample
4df7be735354f2bda0e86b93314cfe875f8a51841a6d16e4bb6f66ae6966801e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4df7be735354f2bda0e86b93314cfe875f8a51841a6d16e4bb6f66ae6966801e.exe
Resource
win10v2004-20220812-en
General
-
Target
4df7be735354f2bda0e86b93314cfe875f8a51841a6d16e4bb6f66ae6966801e
-
Size
404KB
-
MD5
533c2e302058ec8cdfac79058eede831
-
SHA1
94f1cca5cfc53cdadfd6615d35b1c033b6984de3
-
SHA256
4df7be735354f2bda0e86b93314cfe875f8a51841a6d16e4bb6f66ae6966801e
-
SHA512
14c7df5c981b20214628870e231b41d0ade83671bfd87fac421b24c6d0722738663ce5be2495606e0f88a2b156919f07988e4b89ad6c91d6923d485075d4987d
-
SSDEEP
6144:a1yFo6PCL6ni8pvSdM+ZwbWIBzUjIaQCIBYr4rzTXzKG2AgPeMlTFQ:gCxhvSM+JG+xl4yGhnMPQ
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
4df7be735354f2bda0e86b93314cfe875f8a51841a6d16e4bb6f66ae6966801e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Cvdf Size: 4080.0MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Deaw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vsg Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icxfr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hrf Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.razgr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rbhrf Size: 63KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA