Behavioral task
behavioral1
Sample
ec8376d1e929539b5a888a9e7a4091760a9153cd182c278d5b88fa0023174bf6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ec8376d1e929539b5a888a9e7a4091760a9153cd182c278d5b88fa0023174bf6.exe
Resource
win10v2004-20220901-en
General
-
Target
ec8376d1e929539b5a888a9e7a4091760a9153cd182c278d5b88fa0023174bf6
-
Size
763KB
-
MD5
038b02d77d875b086d07004028aee1f5
-
SHA1
af1095a86299569a6be27ec1f2b0c4121daac472
-
SHA256
ec8376d1e929539b5a888a9e7a4091760a9153cd182c278d5b88fa0023174bf6
-
SHA512
e4b87dab64c935c44cbf22089229ba5af835693e1cfe138ab47eb3896aa7a4e9926b10fca435c8a6437c04fa26fa69ca38fa28cc08b432c603b70bca854197fa
-
SSDEEP
12288:tKtETLjGAzZ+1OYPMyx66Q8uQOfnvoGuWgenq0R3XdW5l7LwR8DW0t1Qc9WX:ItudzZ45x6EuQ4vrnq0RdWl7LsmW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ec8376d1e929539b5a888a9e7a4091760a9153cd182c278d5b88fa0023174bf6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 310KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 425KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE