Behavioral task
behavioral1
Sample
af221e1eb498dec2fa3557b0bb98773870f40a1cdddb1dff920fcb0e5ee5e4ee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af221e1eb498dec2fa3557b0bb98773870f40a1cdddb1dff920fcb0e5ee5e4ee.exe
Resource
win10v2004-20221111-en
General
-
Target
af221e1eb498dec2fa3557b0bb98773870f40a1cdddb1dff920fcb0e5ee5e4ee
-
Size
109KB
-
MD5
bdcc6335f4c2faef1f28ce60ad8a9fee
-
SHA1
7482678ec7b3a0b62768510c36158f7ebf56c791
-
SHA256
af221e1eb498dec2fa3557b0bb98773870f40a1cdddb1dff920fcb0e5ee5e4ee
-
SHA512
96ba68837bfa111083d2421fd43f3a79ea2200bff4f569947214ac8675bed79a4c8f87534cc0d3d5dcaf18c5bfd58ebeaa2cd26e922fa5231ebd438b1a666c12
-
SSDEEP
3072:0GF/o1MT3PQeVhHEAXag10aaYeo4fsg5TUk:0m/o1MT3PPVhHRagfaYepfsq
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
af221e1eb498dec2fa3557b0bb98773870f40a1cdddb1dff920fcb0e5ee5e4ee.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE