Behavioral task
behavioral1
Sample
99dc7bcaf25e1d13ff38b6653cc4f1644e4c470e6e17e26889ad12efc5f50b39.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99dc7bcaf25e1d13ff38b6653cc4f1644e4c470e6e17e26889ad12efc5f50b39.exe
Resource
win10v2004-20221111-en
General
-
Target
99dc7bcaf25e1d13ff38b6653cc4f1644e4c470e6e17e26889ad12efc5f50b39
-
Size
769KB
-
MD5
97bb4a6cad59f9aece6cf8fce4b241f8
-
SHA1
cc40c8fde8faebcf59600a7dceb7441faeb3a2c9
-
SHA256
99dc7bcaf25e1d13ff38b6653cc4f1644e4c470e6e17e26889ad12efc5f50b39
-
SHA512
f9d95cc4b75056606ea8228268846ecbcb596e71df80ce6fd1abb6dd41aab1528c1e64e72ecd4923dcf14c9dae9bdbca3951fb554da78f4e224fb4c8b0a0d90f
-
SSDEEP
24576:CojtFc3n796uSWve1OnhozXb0GRBGFH3LFCVUWj:CojtGXkyvmq+zrr3ALHW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
99dc7bcaf25e1d13ff38b6653cc4f1644e4c470e6e17e26889ad12efc5f50b39.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 341KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 18KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 399KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE