Behavioral task
behavioral1
Sample
0d139c059595614d0758c6924764053042adfa1c9f92e91fea1ef0df0a0e5fd3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0d139c059595614d0758c6924764053042adfa1c9f92e91fea1ef0df0a0e5fd3.exe
Resource
win10v2004-20221111-en
General
-
Target
0d139c059595614d0758c6924764053042adfa1c9f92e91fea1ef0df0a0e5fd3
-
Size
1.9MB
-
MD5
9b6ce16b11295bbd170be75975a6e8e9
-
SHA1
202287bfb855fc9d8da56131d30bd6aea539274a
-
SHA256
0d139c059595614d0758c6924764053042adfa1c9f92e91fea1ef0df0a0e5fd3
-
SHA512
991b411f2a6989446a42067f7dd31a710ee054b1a955bf81179379c56e68a7697c62b09b95fb8c9ba2b014c1af1c2a3801dcc2f0ec9a369d4baa8df298763f70
-
SSDEEP
49152:K59xZu6k6LvN7T6zgLzRcIAm81R7ZYJ6iicgi:e9x06ThqgLFcdm47M6idx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
0d139c059595614d0758c6924764053042adfa1c9f92e91fea1ef0df0a0e5fd3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UnPackEr Size: 340KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
By Size: 1006KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LoveBoom Size: 21KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 477KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE