Behavioral task
behavioral1
Sample
632013bf16e7f7673d826e562cbfddc6178088c5771491e06bd962805348f9a6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
632013bf16e7f7673d826e562cbfddc6178088c5771491e06bd962805348f9a6.exe
Resource
win10v2004-20221111-en
General
-
Target
632013bf16e7f7673d826e562cbfddc6178088c5771491e06bd962805348f9a6
-
Size
752KB
-
MD5
8f25eed972d022e6bba374e44b7c5e92
-
SHA1
cfed023d38c73357c19cdf12d375cc86c6e4dd2e
-
SHA256
632013bf16e7f7673d826e562cbfddc6178088c5771491e06bd962805348f9a6
-
SHA512
fe78740e25ee43f4d88dd3fc796464cf1ca7017797fcb86775ae2565bbf1f76fe7439e11f005e513a24fed13a4cbd39438798b6eb5565f34ff9e8db6b00f19a6
-
SSDEEP
12288:l+VgB4KIkSgnz491zYajp+O2m+7I/WlzFH6jsiCB9U6wQgNZ:lxB4KDnzIvVBskeJ16jpa91g
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
632013bf16e7f7673d826e562cbfddc6178088c5771491e06bd962805348f9a6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 372KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 350KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE