Behavioral task
behavioral1
Sample
3da4c4d023c01bf99ac0beb061b952ffa06048f0612e9d714519d50b0102c45d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3da4c4d023c01bf99ac0beb061b952ffa06048f0612e9d714519d50b0102c45d.exe
Resource
win10v2004-20221111-en
General
-
Target
3da4c4d023c01bf99ac0beb061b952ffa06048f0612e9d714519d50b0102c45d
-
Size
2.7MB
-
MD5
a5904e8ea9eb8ef08e58f481b98d2ebb
-
SHA1
23a5acf443d5437439f9d9bc1ff4f9e7933e13ee
-
SHA256
3da4c4d023c01bf99ac0beb061b952ffa06048f0612e9d714519d50b0102c45d
-
SHA512
e33b036ee77b505f3f1662fde5e5090ffc93a2c608cb6766c5ec8c8d477925bdb84eedd61d5ffff3047dfcf3882eeefcc536a2f30072c432a5391ea9c70f6d69
-
SSDEEP
49152:cdEOyvO+dCsoPDo6ubvWPYwtXKfqxYDnJXOEFeDx0m0nndLzMW5dUlga:JFv8xP0J4YmKfRDnJbqx0m0nndLzul
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
3da4c4d023c01bf99ac0beb061b952ffa06048f0612e9d714519d50b0102c45d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 433KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 48KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 955KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE