Behavioral task
behavioral1
Sample
f5545cfa4c7351ce1796e52ab5821da3f19cc22469a891ea84f0154f6a4cfb3f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f5545cfa4c7351ce1796e52ab5821da3f19cc22469a891ea84f0154f6a4cfb3f.exe
Resource
win10v2004-20221111-en
General
-
Target
f5545cfa4c7351ce1796e52ab5821da3f19cc22469a891ea84f0154f6a4cfb3f
-
Size
924KB
-
MD5
99e41ccd1903a20aaf2c93023f8dd406
-
SHA1
78240316e6baa6234e45aba69345feedfad3b465
-
SHA256
f5545cfa4c7351ce1796e52ab5821da3f19cc22469a891ea84f0154f6a4cfb3f
-
SHA512
8f8966da88e7446a36525f41131f8ae9c43fa37697f963127f088640f03a6dd62f2c274604b32ed37b806064c52ec057cfcb99969f72a8fbc97bc4d5b0fce159
-
SSDEEP
24576:ObbkJXe3kZe5xDDvwEZU6lpv4VGOfBGiZQiy:3JXCkg5xDD4qU6lp+GSt6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f5545cfa4c7351ce1796e52ab5821da3f19cc22469a891ea84f0154f6a4cfb3f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 495KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 145KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE