Behavioral task
behavioral1
Sample
59c2dbc8ab5e0cea505ceacc637870043042aa6c556926bdca46718d06a3c283.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59c2dbc8ab5e0cea505ceacc637870043042aa6c556926bdca46718d06a3c283.exe
Resource
win10v2004-20221111-en
General
-
Target
59c2dbc8ab5e0cea505ceacc637870043042aa6c556926bdca46718d06a3c283
-
Size
149KB
-
MD5
3aad50cf61206dfe6f4696518c6ce97c
-
SHA1
5036ac0d4b93a65ee79ab62a536dbbd30e86792e
-
SHA256
59c2dbc8ab5e0cea505ceacc637870043042aa6c556926bdca46718d06a3c283
-
SHA512
dee67bafcce91daeae0f165ab6c980a6f8cc3460acaf84606e6becd9d029493e7a91f432999a55b3af4b8d78a055c9f7fccbeb5a8c61aeb90272f4bc564d6f87
-
SSDEEP
3072:gyvT6KsikBLrnBeNx4HGaQiDxv93jx7mRJJdsUgwdk/Uf6Zv:hT6ycLrBkx4H5QiDxv9zVmRJPVOs2v
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
59c2dbc8ab5e0cea505ceacc637870043042aa6c556926bdca46718d06a3c283.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 99KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE