Behavioral task
behavioral1
Sample
447fffe2c4dddf8eb1ac0161c223ae2d7f31ffa4d6e622160681b5ce383d2905.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
447fffe2c4dddf8eb1ac0161c223ae2d7f31ffa4d6e622160681b5ce383d2905.exe
Resource
win10v2004-20220812-en
General
-
Target
447fffe2c4dddf8eb1ac0161c223ae2d7f31ffa4d6e622160681b5ce383d2905
-
Size
1005KB
-
MD5
62b6a46dd2da638380d48541b3a67fc3
-
SHA1
79ff9a48f6438256b421c83a21710c4f00306e97
-
SHA256
447fffe2c4dddf8eb1ac0161c223ae2d7f31ffa4d6e622160681b5ce383d2905
-
SHA512
431d445cc6ba07f79da2750ff62ff364527f963a3144360523c1b1d5d36c95c072b2b3045a52a4b792619cbdb54d5f0f88791b50daa3069334294abf3df83621
-
SSDEEP
12288:IP2P6tM+JV+8jZt8Eatk5C1AXhv5r3a8gcucKS8G2I9PYSR0w1Q6HZ7noGe0/T6S:xSTV+8tynjot3xnu6ASlwUJnExZ6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
447fffe2c4dddf8eb1ac0161c223ae2d7f31ffa4d6e622160681b5ce383d2905.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 893KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE