Behavioral task
behavioral1
Sample
b224b177fe6b9c63fefa633864f8696e257a5f332a22136d243de2475ad61a19.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b224b177fe6b9c63fefa633864f8696e257a5f332a22136d243de2475ad61a19.exe
Resource
win10v2004-20221111-en
General
-
Target
b224b177fe6b9c63fefa633864f8696e257a5f332a22136d243de2475ad61a19
-
Size
359KB
-
MD5
4eb16b6b2bb0463f39e32a8ed7c4acb5
-
SHA1
456dd169074f5e824605849aeed5bd839a7cb9ee
-
SHA256
b224b177fe6b9c63fefa633864f8696e257a5f332a22136d243de2475ad61a19
-
SHA512
c8b8f995b11f248002d4e7bee59a7f3360da2e0b65db08f7a42aff943fb62a076e0673f00c7957aa7fedc163b93ee72b7d8907faec5869847fd67fd1a41dd05a
-
SSDEEP
6144:IZ8UaoKaYGdP5GWtBku/+zj888ReNbKe10Sp6zIpMqkQc7httkAN3NT68w3p:I3KOPEy/+p8UNbKJ/IpMqkQcnCAN9eh
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b224b177fe6b9c63fefa633864f8696e257a5f332a22136d243de2475ad61a19.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
12345 Size: 257KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 91KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�E�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
656kjm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE