Behavioral task
behavioral1
Sample
b5631d02b10374b34e9b37fae17853f02747892cec868ef3d9d0732a94383b36.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b5631d02b10374b34e9b37fae17853f02747892cec868ef3d9d0732a94383b36.exe
Resource
win10v2004-20221111-en
General
-
Target
b5631d02b10374b34e9b37fae17853f02747892cec868ef3d9d0732a94383b36
-
Size
87KB
-
MD5
e6977257facc76cf85289432b9fdd494
-
SHA1
e76c3ee948d525a0f53c884bae6b3590bf41a3dc
-
SHA256
b5631d02b10374b34e9b37fae17853f02747892cec868ef3d9d0732a94383b36
-
SHA512
5b282f4fe9eaa660b6e3edd0dc7057d2519605372bd2d3ba89daaba2bbe05d16069482ce135eeb48b857bad9bcbd11d92059690fad4d7fb2b170c6607b914309
-
SSDEEP
1536:LPSNdjAA+iHsMiBc/Wj6t3ak/iklnJs3WtyPUk0tDnqaAStUWlh:GV+YshBc/Wy7tyPMJ5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b5631d02b10374b34e9b37fae17853f02747892cec868ef3d9d0732a94383b36.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE