Behavioral task
behavioral1
Sample
79db642759abede9c3d3a28c16784cb96e171e2a7af3dabd50f34a56729923b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79db642759abede9c3d3a28c16784cb96e171e2a7af3dabd50f34a56729923b5.exe
Resource
win10v2004-20221111-en
General
-
Target
79db642759abede9c3d3a28c16784cb96e171e2a7af3dabd50f34a56729923b5
-
Size
91KB
-
MD5
9ce9a3b506b2f389c8fba5a992778a6b
-
SHA1
8b2abb15832ff035d3b77d8939eeafd14784ba6f
-
SHA256
79db642759abede9c3d3a28c16784cb96e171e2a7af3dabd50f34a56729923b5
-
SHA512
bf554842b970a8b1da0fcd6cc141cfc2dd0f8df3136e6dc45964a7836e0e282ff50556d18f0bbf360b51a32f01248f8a818c6bf58cf1f566d960b116116d4427
-
SSDEEP
1536:y0Un55Xn6PANtrGIA/SbBL0E1zP1eGfI6VW0v2Ek6CKV2Ajw3+TFQ0GI48w:y04Rns7IIUFPAGfInjERBVjKiy2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
79db642759abede9c3d3a28c16784cb96e171e2a7af3dabd50f34a56729923b5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE