Behavioral task
behavioral1
Sample
af5a7515968706e1bc9716a716d42f9fd98b494a723edcd028f00d78ecb60b28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af5a7515968706e1bc9716a716d42f9fd98b494a723edcd028f00d78ecb60b28.exe
Resource
win10v2004-20221111-en
General
-
Target
af5a7515968706e1bc9716a716d42f9fd98b494a723edcd028f00d78ecb60b28
-
Size
412KB
-
MD5
7b9ade4bfe3b211046b03bccae50c58e
-
SHA1
ae768845791c3a4a6c984049d82cb0c955825887
-
SHA256
af5a7515968706e1bc9716a716d42f9fd98b494a723edcd028f00d78ecb60b28
-
SHA512
cba1ee1ed2a766d389561d6cc450e4f1f3a76b093c205b710cb3b3fca8919e7ba8baf6502aafe3aa67474e8143f0f523dbc7f029a3ca087ce1a2c199f9a59bd4
-
SSDEEP
12288:XhIj6W6nGbmuUqs80yY05dzfafdMjt4lh:XhjQmuUqsnj05NfQo4
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
af5a7515968706e1bc9716a716d42f9fd98b494a723edcd028f00d78ecb60b28.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 166KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 227KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE