Behavioral task
behavioral1
Sample
e4d3d097a884e940ffba22d5142e185e6ab5319a4ac01c560bdc0d556849327b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4d3d097a884e940ffba22d5142e185e6ab5319a4ac01c560bdc0d556849327b.exe
Resource
win10v2004-20220812-en
General
-
Target
e4d3d097a884e940ffba22d5142e185e6ab5319a4ac01c560bdc0d556849327b
-
Size
190KB
-
MD5
d99337f6639e5028839cb79abc7d2f3e
-
SHA1
fcaf0d329e257bb152f0bdd399b34174caacfc5a
-
SHA256
e4d3d097a884e940ffba22d5142e185e6ab5319a4ac01c560bdc0d556849327b
-
SHA512
de4209656547843dd784a10c6f0b3b31e023f09c2f2916119a861a393e3f7a22feeddd1a5ab4cc78b2b664d52bf4d3b0af8e286b08ba1d06c0958da7367a53b7
-
SSDEEP
3072:WC1XyNH7j6wDwv4gj5vA5OncEeoVzpWkeU4xnItzROgtiIFXg8ioIpR/wWZ+/u14:WCo/OTl3ReoVz0BdxnItsgtRXLQ/R1S
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e4d3d097a884e940ffba22d5142e185e6ab5319a4ac01c560bdc0d556849327b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 168KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE