Behavioral task
behavioral1
Sample
436bcb2bd1d46ffb3f7d533045ae92e0fafa5ff21f148323de2045beb314f9b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
436bcb2bd1d46ffb3f7d533045ae92e0fafa5ff21f148323de2045beb314f9b4.exe
Resource
win10v2004-20220812-en
General
-
Target
436bcb2bd1d46ffb3f7d533045ae92e0fafa5ff21f148323de2045beb314f9b4
-
Size
315KB
-
MD5
758a15c45f7e2712897231e902353601
-
SHA1
3d4ae38cbe6b2bbd47478237e4274554b2dd76d9
-
SHA256
436bcb2bd1d46ffb3f7d533045ae92e0fafa5ff21f148323de2045beb314f9b4
-
SHA512
4d11a137f059f6a405d193128e3eba6989cfde4cd9e4bdcde9c14ae48ad98592d47ecb1e6a2ac6f21099c0c3692e400587c3fd791f8d2e6b27c7c13999b52870
-
SSDEEP
6144:lIlX1reDrY3k5FTG74ToA7XBbXd3euwcLUC56iiUEXHV0xO:wQDq8y74ToANXdlUC56PvKx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
436bcb2bd1d46ffb3f7d533045ae92e0fafa5ff21f148323de2045beb314f9b4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 228KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE