Behavioral task
behavioral1
Sample
ad385db946db535323502d53b998591da2671d45e7850d6f1644cf19ae23a286.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad385db946db535323502d53b998591da2671d45e7850d6f1644cf19ae23a286.exe
Resource
win10v2004-20220901-en
General
-
Target
ad385db946db535323502d53b998591da2671d45e7850d6f1644cf19ae23a286
-
Size
163KB
-
MD5
ef28de853e4e80e4e81f397c8d8f02d0
-
SHA1
2b09f301de13336d35e7c1fcee261b3d0b337cf4
-
SHA256
ad385db946db535323502d53b998591da2671d45e7850d6f1644cf19ae23a286
-
SHA512
1c59e2721ac465f842bed7b8b973ee7342978c25774f38075fd97782a4a151dc172877a0f898e4e13873ad8b957a69ca07987ecfafa173b2215e7ddc7f3b75a7
-
SSDEEP
3072:7rrnupbXalfPRyK8D57QWfXmWT5o7NQFkLjH0Ip6g+2HqddIUBM:7rrw7WfZyJfXzlDFkn0IpTKdV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ad385db946db535323502d53b998591da2671d45e7850d6f1644cf19ae23a286.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 135KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE