Behavioral task
behavioral1
Sample
bed2e68132c07d282247fca7cf54575f837a256ef7a8fbe10caf2f916c7c7126.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bed2e68132c07d282247fca7cf54575f837a256ef7a8fbe10caf2f916c7c7126.exe
Resource
win10v2004-20221111-en
General
-
Target
bed2e68132c07d282247fca7cf54575f837a256ef7a8fbe10caf2f916c7c7126
-
Size
156KB
-
MD5
a93cc91a008dc6fbdff8f1e907dd9cb5
-
SHA1
3dd5f658dd797afe8254ae4a3449c006af0d6ad5
-
SHA256
bed2e68132c07d282247fca7cf54575f837a256ef7a8fbe10caf2f916c7c7126
-
SHA512
1fad9c341e403512d9ce7a3c43d0156db9cdc2695634474fa639a44c178171c45ee471a4aab477cde766d96d7d137f111a3d78b700971b03271dc2979a6a10d5
-
SSDEEP
3072:M89VHLyTY3ODPouuOf/jFVql+cVqEPupH8kpUU4LwDSOosFc87JPgxYuB1jNJ/O:M8HGUeDP9uOf/bqlxjOpUU4MD97FhihG
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
bed2e68132c07d282247fca7cf54575f837a256ef7a8fbe10caf2f916c7c7126.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE