Behavioral task
behavioral1
Sample
b836e32aa5e2dbb9b4e0eddceb16368d49141f0b6121155dcc9a265cae190b61.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b836e32aa5e2dbb9b4e0eddceb16368d49141f0b6121155dcc9a265cae190b61.exe
Resource
win10v2004-20221111-en
General
-
Target
b836e32aa5e2dbb9b4e0eddceb16368d49141f0b6121155dcc9a265cae190b61
-
Size
14KB
-
MD5
21d7012f9c6415a9bc619e8109eb6ed0
-
SHA1
d0d3005f658cf68f6c31193afc40efed39575687
-
SHA256
b836e32aa5e2dbb9b4e0eddceb16368d49141f0b6121155dcc9a265cae190b61
-
SHA512
e585f31fb29e799f4e1b77eb2b539f424e0ff17d4c1bade99be926a45d2ee300df086271d8391e9cb5b6e8b8ba34ca6e0752997d049d178cc3f5429f449bc92b
-
SSDEEP
384:zpHp2Eu6+DOUW7GaAxLr6+Y9PffPzoWWX8:zpHpe6NUW7GdxybProo
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b836e32aa5e2dbb9b4e0eddceb16368d49141f0b6121155dcc9a265cae190b61.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE