Behavioral task
behavioral1
Sample
a0ed0d0a4c528a8951d5a19ff284c91b7cdcba08433f97797f1f07c42a8b521e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0ed0d0a4c528a8951d5a19ff284c91b7cdcba08433f97797f1f07c42a8b521e.exe
Resource
win10v2004-20220901-en
General
-
Target
a0ed0d0a4c528a8951d5a19ff284c91b7cdcba08433f97797f1f07c42a8b521e
-
Size
955KB
-
MD5
fb62e3c4ca598d05e7b946ba04be2179
-
SHA1
91f6f7db78e8fb119bca81639c48bcf7eab087c0
-
SHA256
a0ed0d0a4c528a8951d5a19ff284c91b7cdcba08433f97797f1f07c42a8b521e
-
SHA512
6133f981c1fbccb27076b439f1cd1d96548686087b55ec3160c1edf6402e5e8cd980b5a60a0c0fa2118fadd8a19cf09e5e92614138efa1d895fe969145804383
-
SSDEEP
24576:4G76cMOLEGuig3p3bifksDNCOAOL+cpPr8MEw/2u2+2LMD9:4G7EOgGUhic4NC219LzG+9
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a0ed0d0a4c528a8951d5a19ff284c91b7cdcba08433f97797f1f07c42a8b521e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 845KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 21KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE