Behavioral task
behavioral1
Sample
9497048da1743507fdb7e1683c4f42ad57d72f6220d6269f9f3c985b39ed6bcd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9497048da1743507fdb7e1683c4f42ad57d72f6220d6269f9f3c985b39ed6bcd.exe
Resource
win10v2004-20220901-en
General
-
Target
9497048da1743507fdb7e1683c4f42ad57d72f6220d6269f9f3c985b39ed6bcd
-
Size
585KB
-
MD5
b34583a37ef70eabc0e6fc6b87cae3eb
-
SHA1
b6415b9e5478667307438a5d0b626a44052a1bec
-
SHA256
9497048da1743507fdb7e1683c4f42ad57d72f6220d6269f9f3c985b39ed6bcd
-
SHA512
5f698e3888693dc7e7e9d5926269bc124ee57a066733dff6aa3c3b344fa242d415a55f4e6d73ac7db458c971897802c3b5d1b48117911c0143bd99ded4f29420
-
SSDEEP
12288:MEiUpjpTj1EGnuyyRT/mSpUCFpeOqSOMvDNwUao5dJAn:MELdX1H4/xBFpd6UaohAn
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9497048da1743507fdb7e1683c4f42ad57d72f6220d6269f9f3c985b39ed6bcd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 198KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE