Behavioral task
behavioral1
Sample
bc62c39eb4b018d827279f66d5824b6341a8878bb44124b6ec31d424da6919e8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bc62c39eb4b018d827279f66d5824b6341a8878bb44124b6ec31d424da6919e8.exe
Resource
win10v2004-20221111-en
General
-
Target
bc62c39eb4b018d827279f66d5824b6341a8878bb44124b6ec31d424da6919e8
-
Size
565KB
-
MD5
98d9874c78d63993fe75f939a9b7db38
-
SHA1
ab4eaa3520192aadee9dece5aa46b990f0b956f7
-
SHA256
bc62c39eb4b018d827279f66d5824b6341a8878bb44124b6ec31d424da6919e8
-
SHA512
44a98360d5d213ae62b8a13e561b3aeb8ff02ed5f4e4b6bff392650c9b20bd9f21f9d3a017852985dc9cf305a61bcce81179d655644ac17c73d1d217662ed9f2
-
SSDEEP
12288:YHasIOJu44FkL6+5P8nShyiUZIbrLOhzDOWhOypVqH:/r4j6+V8nU4IYzDOKO+
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
bc62c39eb4b018d827279f66d5824b6341a8878bb44124b6ec31d424da6919e8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 180KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 296KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE