Behavioral task
behavioral1
Sample
c0ed80bae462ff0e73d11976a61ee8b9b8412254db2b843b9d3dbdfb45ca6859.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0ed80bae462ff0e73d11976a61ee8b9b8412254db2b843b9d3dbdfb45ca6859.exe
Resource
win10v2004-20220901-en
General
-
Target
c0ed80bae462ff0e73d11976a61ee8b9b8412254db2b843b9d3dbdfb45ca6859
-
Size
332KB
-
MD5
4c12aa6f3de5a1c10dc3912b632eb8f8
-
SHA1
fe23c1d07b815595d1dbc273f30de94b92309c27
-
SHA256
c0ed80bae462ff0e73d11976a61ee8b9b8412254db2b843b9d3dbdfb45ca6859
-
SHA512
2ac6a197bfbcf20d12c46fa09e76e0ea70852bcca7c2d0f2b78218929d99b45c4725c9c62c689a3296320d3406b40ea4cd0036e86eda9c02e708c58a2d6120fa
-
SSDEEP
6144:zE6c7CRcG8TbJ0aljqtyaZNbO7CYV7J52VMGfOsOb8/jK9mTjTqIUTfchSGf:zVRctJd1eyameMT2VMGfcb0jumTj+Ill
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c0ed80bae462ff0e73d11976a61ee8b9b8412254db2b843b9d3dbdfb45ca6859.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
/APES/ Size: 204KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 9KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE