Behavioral task
behavioral1
Sample
101d60af8b2c1bdab8d2f6e1eb35a0aef7ee2cbb69bde24117a55070a69f7020.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
101d60af8b2c1bdab8d2f6e1eb35a0aef7ee2cbb69bde24117a55070a69f7020.exe
Resource
win10v2004-20221111-en
General
-
Target
101d60af8b2c1bdab8d2f6e1eb35a0aef7ee2cbb69bde24117a55070a69f7020
-
Size
12.0MB
-
MD5
99ac77befe872c0c45f46242497a3863
-
SHA1
8fcf26ecb3b5fc1998b9c883bfa9ad7ea386822b
-
SHA256
101d60af8b2c1bdab8d2f6e1eb35a0aef7ee2cbb69bde24117a55070a69f7020
-
SHA512
37fa98764572fe61171250aedc91828c7e0912fafc5e96f4bb70b98e7549776c48a7497dabab833fdee78bce325f00e0ce47ff1442d75734837a98427b367dbe
-
SSDEEP
196608:sFHulPXqn2I6ds6vk/bDYOndrp8BPag29qmnRyO4MrU66eiPEgLDE/bA/0vjk4JS:spulPXXI6C6vkj8OdrmBPag29qmG6Li7
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
101d60af8b2c1bdab8d2f6e1eb35a0aef7ee2cbb69bde24117a55070a69f7020.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 416KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE