Behavioral task
behavioral1
Sample
b3bac774d88f6af501293f7000d21e01a456cc39ac19b3a3070e51f2aa3e968e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b3bac774d88f6af501293f7000d21e01a456cc39ac19b3a3070e51f2aa3e968e.exe
Resource
win10v2004-20220812-en
General
-
Target
b3bac774d88f6af501293f7000d21e01a456cc39ac19b3a3070e51f2aa3e968e
-
Size
332KB
-
MD5
dd9a6cd944238aae2364f91b2f3e54a1
-
SHA1
6e47dbb8bdfa0d6ff99fc33b218c5aba118cab73
-
SHA256
b3bac774d88f6af501293f7000d21e01a456cc39ac19b3a3070e51f2aa3e968e
-
SHA512
0582a92ec19282f515f20024544e69e2941c20b6ca023541621b51584ce22d9d3db8afd7abf7afe488be2725fe749c415d5a742c99d4e4d8c76498c7501f13e8
-
SSDEEP
6144:hmIGnaAcWl/f30GraatX9k2tzpW8yKPQ49iOR9lBWjrqJYfSFtt3PjU3/Wa:1Gna/Ekql9k2FpEKoqi6Wjrlf43PjUvp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b3bac774d88f6af501293f7000d21e01a456cc39ac19b3a3070e51f2aa3e968e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nfgt Size: 4080.0MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eafrt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nfr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nrt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ngtysf Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nfty Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.afrt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rnfr Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.afr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.amkyt Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA