Behavioral task
behavioral1
Sample
f863ef730cba1e9fb25e2ee98da4335cd217f98c6ccddbad75eba601d7bb0286.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f863ef730cba1e9fb25e2ee98da4335cd217f98c6ccddbad75eba601d7bb0286.exe
Resource
win10v2004-20220812-en
General
-
Target
f863ef730cba1e9fb25e2ee98da4335cd217f98c6ccddbad75eba601d7bb0286
-
Size
179KB
-
MD5
5e37bd06cd9f1b3f79884279b42763ca
-
SHA1
fab42fcf3da0a70ea62fec9a005aa9d9f1165f90
-
SHA256
f863ef730cba1e9fb25e2ee98da4335cd217f98c6ccddbad75eba601d7bb0286
-
SHA512
f5b77bce3227d5671331f62657dae51ba97ade7250b34471c20fcdf81718eb83e5f849c76486676483a4894f0e34e9b7464b62da3e47b917868db85a9ea2929f
-
SSDEEP
3072:jd/taNck4pAA1ZuwL46gu6kwDI4nNAT51F0/lM93hP90OtRPUFejq5Y:jtaxgj1kwLzb6kqKT573h4e+5Y
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f863ef730cba1e9fb25e2ee98da4335cd217f98c6ccddbad75eba601d7bb0286.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 157KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE