Behavioral task
behavioral1
Sample
a3e3c4d094343b7eafc12a562ce67b0038aac1651939954a59d86f741a01fbd4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a3e3c4d094343b7eafc12a562ce67b0038aac1651939954a59d86f741a01fbd4.exe
Resource
win10v2004-20221111-en
General
-
Target
a3e3c4d094343b7eafc12a562ce67b0038aac1651939954a59d86f741a01fbd4
-
Size
222KB
-
MD5
e6b4b4602e5b6e8467bfe4d73f684d04
-
SHA1
b60a5243807787fc1828c021fa3ec6485dfee99e
-
SHA256
a3e3c4d094343b7eafc12a562ce67b0038aac1651939954a59d86f741a01fbd4
-
SHA512
8b7d7a95a5672f5ecd07bb68c44f8beea744e68d9903594676036ffd300c7f09e63dfb3f1e910a22a9f16506d46b3a6b3634486bc455b1d30bbaa7428b009c54
-
SSDEEP
6144:f2jNyndiHZSTh3O5z/T40dGf3VueASXCoh:f6IdiHUT8/kfseASXR
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a3e3c4d094343b7eafc12a562ce67b0038aac1651939954a59d86f741a01fbd4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE