Behavioral task
behavioral1
Sample
5f1e3fbcbc8389ba0d7857802251d5318008530da09814bbba149110edf8eb1b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f1e3fbcbc8389ba0d7857802251d5318008530da09814bbba149110edf8eb1b.exe
Resource
win10v2004-20220812-en
General
-
Target
5f1e3fbcbc8389ba0d7857802251d5318008530da09814bbba149110edf8eb1b
-
Size
463KB
-
MD5
ed57ce3ea0a2361d718c1bed0f53babf
-
SHA1
b386ee7d1a3d6b9457df0833a1bac29421cf787e
-
SHA256
5f1e3fbcbc8389ba0d7857802251d5318008530da09814bbba149110edf8eb1b
-
SHA512
f0df4175e0651f0785787f40e6fd6f01e31cb88b4ce66eaf5fb5132c6d868773feb7ff2a6c8e946d316b03b4c5650462a49aa0d763205d8da82a704dabe959f5
-
SSDEEP
12288:CuxLSD7G37OqNFddQrQoMz6mW3HNJjv8ZZIMB:CuxSD74Oy69LHrjv8ZZIU
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
5f1e3fbcbc8389ba0d7857802251d5318008530da09814bbba149110edf8eb1b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 275KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE