Behavioral task
behavioral1
Sample
539c710578f6702f975b54278439d256f06318ad284281e43ab3938c51dd879d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
539c710578f6702f975b54278439d256f06318ad284281e43ab3938c51dd879d.exe
Resource
win10v2004-20220812-en
General
-
Target
539c710578f6702f975b54278439d256f06318ad284281e43ab3938c51dd879d
-
Size
293KB
-
MD5
3a63cee12d7ae65a236aacb8fb1b1cc0
-
SHA1
11cce8cbd2b5248ce685b2dc606b5892bba71e3f
-
SHA256
539c710578f6702f975b54278439d256f06318ad284281e43ab3938c51dd879d
-
SHA512
b24105249c10f8dca6f370995eed58ffb141a1eaf7633da25887b79069ba579999ec89c4d5467f3f29fbfd174f6505855769cfaf6c18ab245990b11ee3d1c931
-
SSDEEP
6144:U82TxXHqxctqG4e1o8ioxZT+uUQr+BFoqjHH6oHI4CbjTp:U82TxycP1bTZ2FnHUp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
539c710578f6702f975b54278439d256f06318ad284281e43ab3938c51dd879d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 106KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 153KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE