Behavioral task
behavioral1
Sample
eea75eb78f1b1fe8429255a6f8b33ad607ad666513f00c10ed710534d8dcf8f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eea75eb78f1b1fe8429255a6f8b33ad607ad666513f00c10ed710534d8dcf8f0.exe
Resource
win10v2004-20220812-en
General
-
Target
eea75eb78f1b1fe8429255a6f8b33ad607ad666513f00c10ed710534d8dcf8f0
-
Size
208KB
-
MD5
c8afd57cb5e5ac78ae1c3c5225f14203
-
SHA1
9609a841ceb7f622f68119a26a9d3b7b9aba4df3
-
SHA256
eea75eb78f1b1fe8429255a6f8b33ad607ad666513f00c10ed710534d8dcf8f0
-
SHA512
ceedc674b0890593ba10ee51704d1681704478b192f2f4a89e4548508ed02a56e97da2c9728d9df70170e11c59c4e98ef96a042268dccd610e8b688a45491eb5
-
SSDEEP
6144:NXq/BqU9iK+/F6x+xLtDVndSVM02wUOq9K1w:N6/MU9i73x5Vdj07q
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
eea75eb78f1b1fe8429255a6f8b33ad607ad666513f00c10ed710534d8dcf8f0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.adata Size: 4080.0MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pack Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4080.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE