Behavioral task
behavioral1
Sample
f2a43978136690b48f4cf94a1ff6a0df98d64da5c319001334c3b7c149a579fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2a43978136690b48f4cf94a1ff6a0df98d64da5c319001334c3b7c149a579fa.exe
Resource
win10v2004-20220812-en
General
-
Target
f2a43978136690b48f4cf94a1ff6a0df98d64da5c319001334c3b7c149a579fa
-
Size
2.1MB
-
MD5
487a98b1722fab855749cd7f1d6715db
-
SHA1
ff797ab7df702b13f5a8c18864ea1b3b23e575db
-
SHA256
f2a43978136690b48f4cf94a1ff6a0df98d64da5c319001334c3b7c149a579fa
-
SHA512
7935c7395cc70a9f04cf034e09feb3a7b37f21a925eb6664eee63bc1816e8e47f2995f60777890b8c85f9bd78e26937f7004594c47aee051a007d763f0363c3d
-
SSDEEP
49152:6d37PY72iFXeH+Ilfvm+v0eUyCmyT6IBzKsB6EyC:6NY8egvmC0zJh6C4EyC
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f2a43978136690b48f4cf94a1ff6a0df98d64da5c319001334c3b7c149a579fa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 223KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE