Behavioral task
behavioral1
Sample
be41ed34ea199bd05c7a8abdf546409bb94d6adf388c613f40db560fb8d89e06.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
be41ed34ea199bd05c7a8abdf546409bb94d6adf388c613f40db560fb8d89e06.exe
Resource
win10v2004-20221111-en
General
-
Target
be41ed34ea199bd05c7a8abdf546409bb94d6adf388c613f40db560fb8d89e06
-
Size
2.5MB
-
MD5
2b123122b78c5b2df7017a7f4c4cb7c7
-
SHA1
ad9296aa5dee15e92caf6e57d66432bf8a97af83
-
SHA256
be41ed34ea199bd05c7a8abdf546409bb94d6adf388c613f40db560fb8d89e06
-
SHA512
60fed07a57b049bdbcc86bd3f3b4266208a3434b459b0fbb8b2976a04a5cd4eeb2e64ef7ca6da2b2271fb891f7c1b15a1f27096748809e320704cb8adde9bdc8
-
SSDEEP
49152:12Qt66F0nrE8jTqh18LhY4eZcqUqYO7jXQ+ZFivu+oa3K+GxvkAdCMSICQs/NwUj:1T3F0o8jji4KcJOvQSb+oa6JxndCMS/b
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
be41ed34ea199bd05c7a8abdf546409bb94d6adf388c613f40db560fb8d89e06.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 76KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 392KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE