Behavioral task
behavioral1
Sample
be2962a2b82d9f7326e83df4b168df25bf91f1c9d1f7a95ce39337c059b7f9d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be2962a2b82d9f7326e83df4b168df25bf91f1c9d1f7a95ce39337c059b7f9d7.exe
Resource
win10v2004-20220812-en
General
-
Target
be2962a2b82d9f7326e83df4b168df25bf91f1c9d1f7a95ce39337c059b7f9d7
-
Size
122KB
-
MD5
0c44e5836c1eb8cb3c3748c195f17120
-
SHA1
4d390fd45db50eaead1304f2fdd6b2dad1f9161b
-
SHA256
be2962a2b82d9f7326e83df4b168df25bf91f1c9d1f7a95ce39337c059b7f9d7
-
SHA512
aab7ded63fafabac3a72ca91e9286bc6fe52b535e72c3bf0a130c7805eaed8b4bed5b3b487058018ce827bce614008ef3594e026c215855663539d33be64fb7f
-
SSDEEP
3072:MUtp6Bhj9jrxF9aQ+gtwtyryPY+0vfaqCBhwPfL68xsle4O:MU+BvxiWtwtyryi3ojg2SsMv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
be2962a2b82d9f7326e83df4b168df25bf91f1c9d1f7a95ce39337c059b7f9d7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE