Behavioral task
behavioral1
Sample
e1053be1ba9fb5188cd539a386ab8c79d28e346a9c0d092ebebe141965ec3057.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1053be1ba9fb5188cd539a386ab8c79d28e346a9c0d092ebebe141965ec3057.exe
Resource
win10v2004-20221111-en
General
-
Target
e1053be1ba9fb5188cd539a386ab8c79d28e346a9c0d092ebebe141965ec3057
-
Size
1.1MB
-
MD5
0451ba5c75a38051124ff034e9e9bbb1
-
SHA1
8b6e6a9b021c03abdf4f3d0150f2cfd8451587d2
-
SHA256
e1053be1ba9fb5188cd539a386ab8c79d28e346a9c0d092ebebe141965ec3057
-
SHA512
9b7120ba5b4d6a2a941a60ac27aa140fc2256a16b0ddf850e045b134e4ce8b3210f3ea57fbb5ea9314b51149dda1f1a57994440a41b58093a8ed2dca535bee31
-
SSDEEP
24576:BltUbTHyf2pkjq0OwL9Rh/8Wf9b6qtQCFz0+Ht:BkbTHBeq0Osz/809P2f+N
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e1053be1ba9fb5188cd539a386ab8c79d28e346a9c0d092ebebe141965ec3057.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 334KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 735KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE