Behavioral task
behavioral1
Sample
529939b50843f98e50f0c89137e72ae43a9b6f02c2a3dc705cbd2f2abece5602.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
529939b50843f98e50f0c89137e72ae43a9b6f02c2a3dc705cbd2f2abece5602.exe
Resource
win10v2004-20221111-en
General
-
Target
529939b50843f98e50f0c89137e72ae43a9b6f02c2a3dc705cbd2f2abece5602
-
Size
1.6MB
-
MD5
3c05ddf5a9767a03599abc1fa7b8153a
-
SHA1
811af3618ad2b0883c7aabdbef2e6f534c5b0ef6
-
SHA256
529939b50843f98e50f0c89137e72ae43a9b6f02c2a3dc705cbd2f2abece5602
-
SHA512
404e84890bbeee99bd5e53a5746d3c9647469f4e5511852370f4996d1f12ac747909597d8a1a4fe10936ab871cb9e58132eab794481231a2f0e06201694f2c59
-
SSDEEP
49152:CbcbUnoy5f5ouuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuueuuuuuuuuuuuuuuuuuL:oKUZfiuuuuuuuuuuuuuuuuuuuuuuuuur
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
529939b50843f98e50f0c89137e72ae43a9b6f02c2a3dc705cbd2f2abece5602.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 286KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 39KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE