Behavioral task
behavioral1
Sample
e996bde0533d04126ca7dafc0e52716b3587e2b87ccdc99569f6c2e221c445a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e996bde0533d04126ca7dafc0e52716b3587e2b87ccdc99569f6c2e221c445a2.exe
Resource
win10v2004-20220812-en
General
-
Target
e996bde0533d04126ca7dafc0e52716b3587e2b87ccdc99569f6c2e221c445a2
-
Size
384KB
-
MD5
8ad020a9ce7df82858b3b949af153a67
-
SHA1
ecb700660716766b67d1d9911ad7b92b380b4fba
-
SHA256
e996bde0533d04126ca7dafc0e52716b3587e2b87ccdc99569f6c2e221c445a2
-
SHA512
32fade3dcfe74565f54916ee54f8bdc45af4de8c0e83f80e1c95713b6f328f66d75d9e53c53f39eee1ab43c1382e6bad680d39a971a2768a015e21c6673fbdc5
-
SSDEEP
6144:HEn1nl7s74WcGuxgv57jYH/zej3dUAQ4TIPXSUiuk4KdLBEe/fSUEUh4:knXskaeq7Q7y3dUA1Iqv4KlBh/fSUEP
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e996bde0533d04126ca7dafc0e52716b3587e2b87ccdc99569f6c2e221c445a2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 179KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE