Behavioral task
behavioral1
Sample
ef928733cb3b33baeb50febf632d94ae3848a50c3764d2bb4c8e10a102f3d511.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef928733cb3b33baeb50febf632d94ae3848a50c3764d2bb4c8e10a102f3d511.exe
Resource
win10v2004-20220812-en
General
-
Target
ef928733cb3b33baeb50febf632d94ae3848a50c3764d2bb4c8e10a102f3d511
-
Size
101KB
-
MD5
650de5cf6ec6bd9a7c33a92ac0eb45e5
-
SHA1
46db10fecb60a4234a5b5dc075ca1cda56e4c5ac
-
SHA256
ef928733cb3b33baeb50febf632d94ae3848a50c3764d2bb4c8e10a102f3d511
-
SHA512
f61246bf42d1134f4a5e65030b1aa917dcad3c6f8861982edc88a6b5cc726f579960b1a2ff227d6c227663da88de36f08740a858d9c215cd02504d73e1df8875
-
SSDEEP
3072:PpbroY4iy+5WOGBJakHT5Rit2gkP0Xb7YKPt:PpbUY4iy+5WOGjHTMPM0Lxt
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ef928733cb3b33baeb50febf632d94ae3848a50c3764d2bb4c8e10a102f3d511.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE