Behavioral task
behavioral1
Sample
537909adf5f6d5dbb23468dc25e892721f1fdd4579f6d8300df3625600961768.exe
Resource
win7-20221111-en
General
-
Target
537909adf5f6d5dbb23468dc25e892721f1fdd4579f6d8300df3625600961768
-
Size
285KB
-
MD5
61937bbe9ed7144c70452c028fba1e33
-
SHA1
95ac194a265a784fa078f4af24297c8bcd4eb09e
-
SHA256
537909adf5f6d5dbb23468dc25e892721f1fdd4579f6d8300df3625600961768
-
SHA512
2383b84b4d1cb5b1df22a6c0d9f27e75c3249b5f4bfdc59bb2cf8b3a4be10e76de500f4fb4e31c8d0776910e41596c37df901dea0de64eeb3e8aaa765f8c2fa6
-
SSDEEP
6144:DNSIpFWkaFaMNZ21WPBpXZENOpNwXWVmp2wEA:n0kaFTk1W+ANMWSbh
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
537909adf5f6d5dbb23468dc25e892721f1fdd4579f6d8300df3625600961768.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 51KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE