Behavioral task
behavioral1
Sample
d4686517540f9412b8962db7407be1491d45379d94b36a0e46bd466159b71d75.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d4686517540f9412b8962db7407be1491d45379d94b36a0e46bd466159b71d75.exe
Resource
win10v2004-20221111-en
General
-
Target
d4686517540f9412b8962db7407be1491d45379d94b36a0e46bd466159b71d75
-
Size
472KB
-
MD5
3e261ef11d34ee7923d8b93f2c280bb0
-
SHA1
435798fcbac9bb8021c261f43bbb5dc7586d768a
-
SHA256
d4686517540f9412b8962db7407be1491d45379d94b36a0e46bd466159b71d75
-
SHA512
24c4f99110ed14ab1bf639430fd4ee5ad49aebd19e785f3cc4262643db26219d353aa9ca123c14285dcd52a97696fe3ef777faa2d9cd6a0ee5e8cb17cc9c0e7e
-
SSDEEP
6144:2CbaoZXWSUeAknorjUb2Y5DnmLfbtVFraYcnJ5u4wwvnBOW9nq4DVAppHEdcrOo/:t2o0BpkoonWX/cJ59VbNGqYZ2+uA1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
d4686517540f9412b8962db7407be1491d45379d94b36a0e46bd466159b71d75.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 227KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 222KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE