Behavioral task
behavioral1
Sample
84e6b5c1bed5e859de1a52fdd297af3d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84e6b5c1bed5e859de1a52fdd297af3d.exe
Resource
win10v2004-20221111-en
General
-
Target
84e6b5c1bed5e859de1a52fdd297af3d.exe
-
Size
3.3MB
-
MD5
84e6b5c1bed5e859de1a52fdd297af3d
-
SHA1
d509fc66bac411ac144160944780abdda645d92e
-
SHA256
e7d26798b72969f68440983de0fc69305968a63f846bacd1669f43aa9ffd4f89
-
SHA512
fd57408a4a27eed589977b1ace5e11e5c7ce7be03cc84605c29e95e14ed99a024194cddcb06b7bab0edf05477d1230138ce88c915fa38dd8b3f837bbd2e442c5
-
SSDEEP
98304:naZx4nHWpIwDZbLmqjC34hLx7KDAY90eT0+8A:AxaWuYLmqjXKDT90ew2
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
84e6b5c1bed5e859de1a52fdd297af3d.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 509KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE