Behavioral task
behavioral1
Sample
dd29e86c7999c0274f3fd96fc32bfa10c10c5da5343ff97e4458f32e9841b266.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd29e86c7999c0274f3fd96fc32bfa10c10c5da5343ff97e4458f32e9841b266.exe
Resource
win10v2004-20220812-en
General
-
Target
dd29e86c7999c0274f3fd96fc32bfa10c10c5da5343ff97e4458f32e9841b266
-
Size
3.6MB
-
MD5
7f68e4759e77cacdb4cd3a30cd72b178
-
SHA1
7cb946570def8c4c57eaa7c468975b3deb342fc5
-
SHA256
dd29e86c7999c0274f3fd96fc32bfa10c10c5da5343ff97e4458f32e9841b266
-
SHA512
5bfb095d240f0d5da46c882141c8c1a7bb5795b2c70c47e8210bc637bafb317f7c22255eb3af845db6e12daaae2155df2fd84c4525069f35231cd0361841ccae
-
SSDEEP
98304:zKCubmXoX7wsEB6cnmXLYu3ALnK+5Kf5v5V2n:z2mXo0dnKEnNy5vU
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
dd29e86c7999c0274f3fd96fc32bfa10c10c5da5343ff97e4458f32e9841b266.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.4MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE