Behavioral task
behavioral1
Sample
7ca121ff5c760f6bfa11594cbe25c3a6fb6c24561de6d3ef1c7b23aeae449f9e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7ca121ff5c760f6bfa11594cbe25c3a6fb6c24561de6d3ef1c7b23aeae449f9e.exe
Resource
win10v2004-20221111-en
General
-
Target
7ca121ff5c760f6bfa11594cbe25c3a6fb6c24561de6d3ef1c7b23aeae449f9e
-
Size
645KB
-
MD5
b424710b79185ad60748f5b53f9a9ac4
-
SHA1
f1f297a8368ebf66fca8cf9a1fa834c515a9f73a
-
SHA256
7ca121ff5c760f6bfa11594cbe25c3a6fb6c24561de6d3ef1c7b23aeae449f9e
-
SHA512
b6a28c32a32869d72de32588811dc84bd20128a3a4c57d5ce0e5d6f1b2ea7b7f74bbbacf039c180fbe186d9b85cd65af7b723a1239a1134a40f6b2698f531f10
-
SSDEEP
12288:fpWXo5HX6UAttLUi7AWRyG234MvskU94TRFnYivlfSjsfKG6J34a:fk453hM1pYTIAsYnYYNNb6J
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
7ca121ff5c760f6bfa11594cbe25c3a6fb6c24561de6d3ef1c7b23aeae449f9e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 94KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 536KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE