Behavioral task
behavioral1
Sample
80810caad2b6407982cc4de11c9dcc2dbd57bb577c6bf4389d73e73239bd3e25.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
80810caad2b6407982cc4de11c9dcc2dbd57bb577c6bf4389d73e73239bd3e25.exe
Resource
win10v2004-20220812-en
General
-
Target
80810caad2b6407982cc4de11c9dcc2dbd57bb577c6bf4389d73e73239bd3e25
-
Size
872KB
-
MD5
20a78de2ebb2284ffdcc2975b3575850
-
SHA1
ce18b5296e78b13fa3e21c2341c8fa1bcaacb449
-
SHA256
80810caad2b6407982cc4de11c9dcc2dbd57bb577c6bf4389d73e73239bd3e25
-
SHA512
a07b354c5cbffeb1f6db74064247407dec068ef3efec8630933d2a562301e6f215f1c7827ea5e53fdea375ca3c5d68b590c92796e65e32e7c89cde98e632b0e4
-
SSDEEP
12288:SxOBkz6DnJp3L8cwPOnSZAzMsRgvTUxEL/to4KPPuDoojhFKmXEI2C25aXh7ihIm:Y4zJwWSyzMsRZ6O4OMoo1FDUCYamIpE
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
80810caad2b6407982cc4de11c9dcc2dbd57bb577c6bf4389d73e73239bd3e25.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 799KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE