Behavioral task
behavioral1
Sample
ba763883562e7352c7aca61bba6c2ee6a7ca77976e188ce285eb374f2e850e92.exe
Resource
win7-20220901-en
General
-
Target
ba763883562e7352c7aca61bba6c2ee6a7ca77976e188ce285eb374f2e850e92
-
Size
370KB
-
MD5
ea7f37ae179fbe8fe883eb50cb7b7282
-
SHA1
4f6b38e8745df0121e8c8d2599e917cc0b73199f
-
SHA256
ba763883562e7352c7aca61bba6c2ee6a7ca77976e188ce285eb374f2e850e92
-
SHA512
8a902a0237e24422ea5915dec7cf9883edfdbe66abe0a26ac3f672cf28876e46d57def5b9363595acb6ccb64ac465ab37bfde6e533555e1999937e246ad30b88
-
SSDEEP
6144:7LL6TCDPJVsFnO0aLxvTArX4PFuDzKiqKH+H4mJrM7l7e9sHq8fRqUHgAMwvQfQq:7LL6u3unElLaGYDuiqHHZCZHq8fZHzMZ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ba763883562e7352c7aca61bba6c2ee6a7ca77976e188ce285eb374f2e850e92.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 27KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE