Behavioral task
behavioral1
Sample
c90652e20d736bb87ab12cf150ad32af479f912e334f9a00a7de62fbf42f3a14.exe
Resource
win7-20220901-en
General
-
Target
c90652e20d736bb87ab12cf150ad32af479f912e334f9a00a7de62fbf42f3a14
-
Size
285KB
-
MD5
6a9a120ad5e4ea30cc00539d20c1cb35
-
SHA1
ab25062130a5a1c5e2b10b9f72b8c1bc1bbaedd2
-
SHA256
c90652e20d736bb87ab12cf150ad32af479f912e334f9a00a7de62fbf42f3a14
-
SHA512
d0f7f861fa76e60d5ff8bf5c25fac64cd8307c9af841959b4bbe11cbce2e0af61be0eaee4eea5c9b1420a29bd028a1cc1599e7a493dcc6ffc72e6a549cc7ca6e
-
SSDEEP
6144:DNSIpFWkaFaMNZ21WPBpXZENOpNwXWVmp2wEX:n0kaFTk1W+ANMWSby
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c90652e20d736bb87ab12cf150ad32af479f912e334f9a00a7de62fbf42f3a14.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 51KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE