Behavioral task
behavioral1
Sample
b23607250d6cd8c40109f3ce540b67e8ab98b1071020e93b092167d24591da17.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b23607250d6cd8c40109f3ce540b67e8ab98b1071020e93b092167d24591da17.exe
Resource
win10v2004-20221111-en
General
-
Target
b23607250d6cd8c40109f3ce540b67e8ab98b1071020e93b092167d24591da17
-
Size
309KB
-
MD5
1aff66ed2f53aff73dc0d7e2a3b1d410
-
SHA1
1e36fdee510b8d32851c413b4a87231112846494
-
SHA256
b23607250d6cd8c40109f3ce540b67e8ab98b1071020e93b092167d24591da17
-
SHA512
0215deb98e59577c9eb91f82b122dd5c9d7fbacd8af4874db2a4aeefff3b7aa1fccabaa13de054936006151ec904902e45f5ebc1b4b69cde36f3ad9ea3bbe710
-
SSDEEP
6144:8JIz5sOsIJlViZP4Rj011Eyj4I0C6Qim8ADR2mr6e:DRjiZP4RI11wIiQiQDR3N
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b23607250d6cd8c40109f3ce540b67e8ab98b1071020e93b092167d24591da17.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 151KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE