Behavioral task
behavioral1
Sample
940b2e729387f3afb208553995fdceb803f357c25a694aab950cc4d7f5876941.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
940b2e729387f3afb208553995fdceb803f357c25a694aab950cc4d7f5876941.exe
Resource
win10v2004-20220901-en
General
-
Target
940b2e729387f3afb208553995fdceb803f357c25a694aab950cc4d7f5876941
-
Size
351KB
-
MD5
db576c0c818538cde84f59155cabd333
-
SHA1
eadd2d8cbd18c41cc47983a71fcc0854466708eb
-
SHA256
940b2e729387f3afb208553995fdceb803f357c25a694aab950cc4d7f5876941
-
SHA512
1bc9ef849d55fbb46db7e959fdeed356dedc451855017f494a6ff3f01f8d2e6ae82b69f8cfb0f889ca67368aa5dd64e1868b2a52cb454bf037473c00f552122b
-
SSDEEP
6144:83XZf79aNAsG0jxdJ7O3p4Zo6Qkdfkkn+pzb7J7468RL0EtL+rt8ZyGel1PG28D2:83X97CAsGifO3Podfkkn+pzPJ74vRQCK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
940b2e729387f3afb208553995fdceb803f357c25a694aab950cc4d7f5876941.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 289KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE