Behavioral task
behavioral1
Sample
ee6e1ebe25d8b423b0d1d14daa178fb6593cf777388887cf8dc67d1e8fde69d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee6e1ebe25d8b423b0d1d14daa178fb6593cf777388887cf8dc67d1e8fde69d7.exe
Resource
win10v2004-20220812-en
General
-
Target
ee6e1ebe25d8b423b0d1d14daa178fb6593cf777388887cf8dc67d1e8fde69d7
-
Size
309KB
-
MD5
95f688928785474dd66c8bf6d6de9a47
-
SHA1
44d4d23b66f4b3749d3aed1978d3f3227c846da0
-
SHA256
ee6e1ebe25d8b423b0d1d14daa178fb6593cf777388887cf8dc67d1e8fde69d7
-
SHA512
94cc04c42c16fc20ca0de8ef34405b7389c0ee8a7564fbe8353b2af8c2a53097b9424a6eeb5c25cc017e15c09141575bce68ed7e59b06445d6321a5f8941be53
-
SSDEEP
6144:mGOpM3wb9+Hd+hQy+QMC7K3RpE/Dyjyi3AnwEuvgYWM2aGIFksb8W:mlMAZ+HKzSG70E0nfwW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ee6e1ebe25d8b423b0d1d14daa178fb6593cf777388887cf8dc67d1e8fde69d7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE