Behavioral task
behavioral1
Sample
342c1ca803941db33ab6dd16facca70d5c3a4d57fda3b096a902ff14a2a6e904.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
342c1ca803941db33ab6dd16facca70d5c3a4d57fda3b096a902ff14a2a6e904.exe
Resource
win10v2004-20220812-en
General
-
Target
342c1ca803941db33ab6dd16facca70d5c3a4d57fda3b096a902ff14a2a6e904
-
Size
201KB
-
MD5
fb9816c628d8fb5b578a3486c7f73d1f
-
SHA1
d98aa469267fa546acdb91cde35c3e02c27eb636
-
SHA256
342c1ca803941db33ab6dd16facca70d5c3a4d57fda3b096a902ff14a2a6e904
-
SHA512
ff71ac62d6463d57e2561267eb1d28d4c0fe0be5cbc4206c2301de61ae3afa92df146e1fde2f0550a3977acfdffc9cc799e8eeeffface2c7bf20aa34e5d56723
-
SSDEEP
6144:bNyjHvAOsRmoLNEBdYsx99sjlnfeipX0+6pDW:pyjP1KLNucl2imp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
342c1ca803941db33ab6dd16facca70d5c3a4d57fda3b096a902ff14a2a6e904.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 142KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE