Behavioral task
behavioral1
Sample
86f57a3f33d6209c98535b9a249f673cec0208a937221714a27ac20ecda0d311.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
86f57a3f33d6209c98535b9a249f673cec0208a937221714a27ac20ecda0d311.exe
Resource
win10v2004-20221111-en
General
-
Target
86f57a3f33d6209c98535b9a249f673cec0208a937221714a27ac20ecda0d311
-
Size
99KB
-
MD5
35d06d5575819c2371ad9043c8473ace
-
SHA1
6556dc46559d060f8487cd6936301be0fad5dabd
-
SHA256
86f57a3f33d6209c98535b9a249f673cec0208a937221714a27ac20ecda0d311
-
SHA512
193d982959922acdd971340085d7daae7af0ae7a4d59dd447119ef80555746ccfff1baae9529553598869f85d453081e19274f6d1a29cd08945689324c3c3062
-
SSDEEP
1536:L9Gr5Ar96/EQhayoEeCnBopWz2O3TStdJdQWHXxh+bDKjurcLctSJwX1LIQ3RqFD:RGFi96/EQhhiC9P8dwyWbeCYLc1FR2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
86f57a3f33d6209c98535b9a249f673cec0208a937221714a27ac20ecda0d311.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 84KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE