Behavioral task
behavioral1
Sample
60f28f348471873dd598ea8effb08dd64f7f3195126cded47353befb837d1cf5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
60f28f348471873dd598ea8effb08dd64f7f3195126cded47353befb837d1cf5.exe
Resource
win10v2004-20220901-en
General
-
Target
60f28f348471873dd598ea8effb08dd64f7f3195126cded47353befb837d1cf5
-
Size
735KB
-
MD5
27b9dba4ebf82c5ae8208cf36f586406
-
SHA1
4275b45bbac1668bb884ee0b5cfc56456a036c5a
-
SHA256
60f28f348471873dd598ea8effb08dd64f7f3195126cded47353befb837d1cf5
-
SHA512
871b78bb045ebc17d57eca8785dfbbbc48e146a01e4058489cf0f3d1afa694db19a89b372a6da2887f38cdeb14c0bc9343015038a89477866e0c959a0afb8173
-
SSDEEP
12288:/32kZxYqjO4UwcVHD9CrSek47Mqk8QtUaYdp4UFn+i84PoGM4G8sV9c9:/DZqlwgCrRkMi2aO1G2ob82m
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
60f28f348471873dd598ea8effb08dd64f7f3195126cded47353befb837d1cf5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 416KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE