Behavioral task
behavioral1
Sample
19fe6a367b66c7f8f89bfc7afe85baf35afec93d2023131c57192201fc185133.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19fe6a367b66c7f8f89bfc7afe85baf35afec93d2023131c57192201fc185133.exe
Resource
win10v2004-20220901-en
General
-
Target
19fe6a367b66c7f8f89bfc7afe85baf35afec93d2023131c57192201fc185133
-
Size
856KB
-
MD5
e6b88f947c0e85817d9519e06d72dfb0
-
SHA1
0c2895a092b3fb2fb9cecf28f2b8ad39cf692315
-
SHA256
19fe6a367b66c7f8f89bfc7afe85baf35afec93d2023131c57192201fc185133
-
SHA512
7b266ca202c1989e533c33d319dce7264384286176048f60e0bf1bc2d23e5e12f1c224ec915796b1fdd21181bcef4a9220d309550673a62cb9d6fe10cc11808c
-
SSDEEP
24576:f+rAgOvuG55ni4yq+bCIsoK/kiqO9KspPfur6+IuqSqkF2Bt8RF:f+TOmGjibCIsoKMiqyKjrhLqfkFI8v
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
19fe6a367b66c7f8f89bfc7afe85baf35afec93d2023131c57192201fc185133.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 279KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 439KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE