Behavioral task
behavioral1
Sample
f3b0692f28a8bbff4273f8f8cc8dc75451926258f571ffe64dd90111c394314b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3b0692f28a8bbff4273f8f8cc8dc75451926258f571ffe64dd90111c394314b.exe
Resource
win10v2004-20220901-en
General
-
Target
f3b0692f28a8bbff4273f8f8cc8dc75451926258f571ffe64dd90111c394314b
-
Size
3.9MB
-
MD5
8f5b97325ebdc4c325b35f21e7685fc6
-
SHA1
a27d1bb84f387eba6ac51a34b56140034d1a10b9
-
SHA256
f3b0692f28a8bbff4273f8f8cc8dc75451926258f571ffe64dd90111c394314b
-
SHA512
620ce7ff9d832602a4ff435782ff4538f4d851b0c9ab8651f15a481aa44fa631cb31f0d0787418faa340b93a1617603a68ffdf972c8201a727505d6b08e4f06f
-
SSDEEP
49152:5JIeL/0GSYYcwOi/TS2qm8n+p27JPXlpJdw8WgJe8WOZd0nOkE6tX8SlG7xMQ4ja:LxcGiOen25lpMJ18W9n98xMQ4LXuH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f3b0692f28a8bbff4273f8f8cc8dc75451926258f571ffe64dd90111c394314b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 319KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 30.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE