Behavioral task
behavioral1
Sample
0febf905de18bd843c0502af2dfececbcf78128d765ef32db39c32f3546f7801.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0febf905de18bd843c0502af2dfececbcf78128d765ef32db39c32f3546f7801.exe
Resource
win10v2004-20221111-en
General
-
Target
0febf905de18bd843c0502af2dfececbcf78128d765ef32db39c32f3546f7801
-
Size
2.6MB
-
MD5
c2bb93bac64fdf9eab2d07c9b6c8db90
-
SHA1
f629d6fc24dfccf2cd30305f8d18760169e01369
-
SHA256
0febf905de18bd843c0502af2dfececbcf78128d765ef32db39c32f3546f7801
-
SHA512
e50def49ff1ae4d7c97593bf947aa171187f952697cc698b08deb3dc8d73208fc864006eaf173196d128218861d1cacc84cdd9fa2ad8f033581569ea9995ac45
-
SSDEEP
49152:rmIg5aJiPiS2DoBB0A7WzX79yLK0F8/DipFGSl55fuAzblMK16tZ:aIuCo/BB0A747Z4lffukb51
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
0febf905de18bd843c0502af2dfececbcf78128d765ef32db39c32f3546f7801.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.6MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 22KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 998KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE