Behavioral task
behavioral1
Sample
a85e47b97a565949bbf183edf5979d31e63fb0776ee1dbaea48cac578cdf4b97.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a85e47b97a565949bbf183edf5979d31e63fb0776ee1dbaea48cac578cdf4b97.exe
Resource
win10v2004-20220901-en
General
-
Target
a85e47b97a565949bbf183edf5979d31e63fb0776ee1dbaea48cac578cdf4b97
-
Size
38KB
-
MD5
86de4e3671d35629b65414d7fb7a3db4
-
SHA1
0c007dd6b8fcd9f5f1a6d6b68e9b48247150965f
-
SHA256
a85e47b97a565949bbf183edf5979d31e63fb0776ee1dbaea48cac578cdf4b97
-
SHA512
c503239c211043d6c337b96cb6e1e2bc6476e8e09b7742596e5061c97bef7b0dfe4b7f008fc5ecdb7ae5b77b723e2772d7746ad52956613e084987afb5bef61a
-
SSDEEP
768:6FDUCuS/sKQEt60XvQGp1cZ90r01uuvUVVxMOmVpPiJTVQ0xOha50:fPnhU59uzMvxM5RIVQ1j
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a85e47b97a565949bbf183edf5979d31e63fb0776ee1dbaea48cac578cdf4b97.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE