Behavioral task
behavioral1
Sample
e39a778400886c3a336e92e12607ca9141d10cb58074da70fe775ee0a1f81de0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e39a778400886c3a336e92e12607ca9141d10cb58074da70fe775ee0a1f81de0.exe
Resource
win10v2004-20220812-en
General
-
Target
e39a778400886c3a336e92e12607ca9141d10cb58074da70fe775ee0a1f81de0
-
Size
263KB
-
MD5
81e2f2d27e026bc08f6f31c69ef8d44b
-
SHA1
65079cdd8cfd25a2795753a8b4cbd0386b96586c
-
SHA256
e39a778400886c3a336e92e12607ca9141d10cb58074da70fe775ee0a1f81de0
-
SHA512
8dc25711bdb43f250151ac44b3b3395626e580c1b57db7539b974506e96fdad4bc227f56c104503b6f474114617b0209e43aee6c122ff2b2afbf999281cec5f0
-
SSDEEP
6144:De/zpe5Yv0w1AjoijPVlUzkESlWhNitZy+d3a3oZ4b:IUYvpWjoijPV6zklWHitZy+Mb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e39a778400886c3a336e92e12607ca9141d10cb58074da70fe775ee0a1f81de0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 231KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE