Behavioral task
behavioral1
Sample
461e95925cf42edac308a26e44ffe3135e71391610f0641f014e0b78d91a31c4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
461e95925cf42edac308a26e44ffe3135e71391610f0641f014e0b78d91a31c4.exe
Resource
win10v2004-20221111-en
General
-
Target
461e95925cf42edac308a26e44ffe3135e71391610f0641f014e0b78d91a31c4
-
Size
895KB
-
MD5
b70317f4b0963053df2097d3cd083814
-
SHA1
9b9626ca0dce7e299d90c10aadd6867408486608
-
SHA256
461e95925cf42edac308a26e44ffe3135e71391610f0641f014e0b78d91a31c4
-
SHA512
c3a789b27cad40190003a9c3f5f72390f1fcd907dbdfe20ccb940d60466007a4569a5d1143d5a8c7f1ae231c42798c49dd7ce5c56a5643178ce7916106371f12
-
SSDEEP
24576:49MiYMY0QREc1lWyJEKtmNL7qS2+dVd9rISbA393b4/2A:3h9D4yCKgxHb3r1ctrc2A
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
461e95925cf42edac308a26e44ffe3135e71391610f0641f014e0b78d91a31c4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 821KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 21KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE