Behavioral task
behavioral1
Sample
db23514e95c94c7f090291c73da666a934e30da89befb335d840b52846d38863.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db23514e95c94c7f090291c73da666a934e30da89befb335d840b52846d38863.exe
Resource
win10v2004-20220901-en
General
-
Target
db23514e95c94c7f090291c73da666a934e30da89befb335d840b52846d38863
-
Size
22KB
-
MD5
bd9c1c32daf81ad2c809f9b4b85ddb77
-
SHA1
6851b9e377c7058f025bfa0bd87c982dfd259d15
-
SHA256
db23514e95c94c7f090291c73da666a934e30da89befb335d840b52846d38863
-
SHA512
c07596e8c1913e81c475a40b51f60bf1b0e47e1e11cc5990e8374988d808ffbf941ec641eba9740688d2f0ba14118a7eec097cd14bbf05a102abca442851934c
-
SSDEEP
384:GwOiB+J5vW03Z2fdHWUcyQ1y1fj1n5OEfLpvRYH7ZRK1ExAx/r6+S9Pfu7n5tp:37+J5e0J2M1vM1xnd9ps7ZRK1ECxuden
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
db23514e95c94c7f090291c73da666a934e30da89befb335d840b52846d38863.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE