Behavioral task
behavioral1
Sample
021e6372be93914783c9c5f38f41281e3889714295c24290e2e7c1468db13b72.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
021e6372be93914783c9c5f38f41281e3889714295c24290e2e7c1468db13b72.exe
Resource
win10v2004-20220812-en
General
-
Target
021e6372be93914783c9c5f38f41281e3889714295c24290e2e7c1468db13b72
-
Size
37KB
-
MD5
3610164f73f5a8d1af9a35c91b49e7f1
-
SHA1
30b94f1a1edf0e6033430c7f3bc93e0ca112cf4c
-
SHA256
021e6372be93914783c9c5f38f41281e3889714295c24290e2e7c1468db13b72
-
SHA512
4ae9346210c59df9213ed01dcdbec98ef48eb5188cb5c434073c1811462b4a8112382ba27ab25bed6cf1cef8a83bc1a64b8eecf3b7a5eb23a68db976c37f35ef
-
SSDEEP
768:nVcRlR94q4LMDVeuKT3LXeLeE7vvcJ1vZIWbG7xVbPrIcHZzT:nVcRn94FKKzaCETmFZIWbmscH5T
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
021e6372be93914783c9c5f38f41281e3889714295c24290e2e7c1468db13b72.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE