Behavioral task
behavioral1
Sample
a8434cfa98a4cb27f6b19a8f03886689d01cc2ffe187e0ceafbbfec96947fd06.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a8434cfa98a4cb27f6b19a8f03886689d01cc2ffe187e0ceafbbfec96947fd06.exe
Resource
win10v2004-20220901-en
General
-
Target
a8434cfa98a4cb27f6b19a8f03886689d01cc2ffe187e0ceafbbfec96947fd06
-
Size
54KB
-
MD5
d6023394bc67aeda50ea6f19ed072b0e
-
SHA1
8c42a31ac7e7da5c587282787bd9fffd3124aae6
-
SHA256
a8434cfa98a4cb27f6b19a8f03886689d01cc2ffe187e0ceafbbfec96947fd06
-
SHA512
10f2cb0996cb85113cf179ecaf33ba6009e015a92afc2e046e2aef18cf5a19cdafd60e98de0b4410cbf700893ac1db87211a4580106d016b839b33469aeba13f
-
SSDEEP
768:EM7vL/5Xr7EcYwApbFVI28lrI0S2CeSrpfKaD5XwbHV8ZFrknIE4le5O/UnIxqdL:EM7pEZxJD6IpxrrJKaDdw8+IHe5OgL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a8434cfa98a4cb27f6b19a8f03886689d01cc2ffe187e0ceafbbfec96947fd06.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 42KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE