Behavioral task
behavioral1
Sample
4798716df4299dc9a3036d213334bd08c0a5114f3f4f8dc99d3b751b097999d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4798716df4299dc9a3036d213334bd08c0a5114f3f4f8dc99d3b751b097999d6.exe
Resource
win10v2004-20220812-en
General
-
Target
4798716df4299dc9a3036d213334bd08c0a5114f3f4f8dc99d3b751b097999d6
-
Size
293KB
-
MD5
cc24883a3531a6f73e1e767ffb99b581
-
SHA1
f666766240d9bd9b64b84bf4555df478f4688673
-
SHA256
4798716df4299dc9a3036d213334bd08c0a5114f3f4f8dc99d3b751b097999d6
-
SHA512
cbf07216048ab1f900a3ccb836ffe56b5dfea2bbb19daaa17af555734f03257caadbf592dc6bd9554c389e1747bc740e3e1ba5f7f65416af7703fa1e4687fe5c
-
SSDEEP
6144:4lP4wVYQfbtNHGADCeHcRM+LlCvd/d+KJnTIOgtEtk6RJ3bch2se:0FtNmADCeEM+Ud/YyRvRJrchde
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
4798716df4299dc9a3036d213334bd08c0a5114f3f4f8dc99d3b751b097999d6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 261KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE