Behavioral task
behavioral1
Sample
db286363703985657ef8659dd3db24242b218d13357ea675dbbe1b61e342d04a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db286363703985657ef8659dd3db24242b218d13357ea675dbbe1b61e342d04a.exe
Resource
win10v2004-20220901-en
General
-
Target
db286363703985657ef8659dd3db24242b218d13357ea675dbbe1b61e342d04a
-
Size
29KB
-
MD5
97e3cd171b1c873210f6e54c9a098d9f
-
SHA1
3572b5623cadfe3c42a5adead147e65dce244664
-
SHA256
db286363703985657ef8659dd3db24242b218d13357ea675dbbe1b61e342d04a
-
SHA512
2a190593ec3e137fa4a3c7fd7a94e7bbff5cd702cc0a2cce2f5e95fee14bc70b0d9ef3bb7126682eaf551bd3f8e4dce51f5581b654449a0ada72cec5c94207bd
-
SSDEEP
768:MXZT+JZzXQEjKjPdnfSKKMEEQr0EXEBXhAxodeVXB:MX+7jKjPdnfSKKMxKCF2B
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
db286363703985657ef8659dd3db24242b218d13357ea675dbbe1b61e342d04a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE