Behavioral task
behavioral1
Sample
0fc2c8515c98abcc9f6afef79552d99a27f8d0104901b89dfe56f2f48bb4da4f.exe
Resource
win7-20220812-en
General
-
Target
0fc2c8515c98abcc9f6afef79552d99a27f8d0104901b89dfe56f2f48bb4da4f
-
Size
360KB
-
MD5
33869b069d0ec275cfc36a212a80d1dc
-
SHA1
bc450bea1457751c2d5e50abf71b63c3a9fe6310
-
SHA256
0fc2c8515c98abcc9f6afef79552d99a27f8d0104901b89dfe56f2f48bb4da4f
-
SHA512
10aeb05cb2248cf012c2c329660e5191dc5cbc13e79ca1f235b6b6dc2ca099a17338e2e543041a6e228a5b961bd93d4982847e08ccddc2910a172294c8c90017
-
SSDEEP
6144:VRFG/0ceu5JJkctNoHlIzDL5gqRnEDRW/CYtInM9K9CXZu3ij8ik/fLK829Ay3lm:vFDcDvkIoHuFBREDRW/CLQK9gUiVJ147
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
0fc2c8515c98abcc9f6afef79552d99a27f8d0104901b89dfe56f2f48bb4da4f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 27KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE