Behavioral task
behavioral1
Sample
ff0b398c48e8b824aee33f92f088ab9fb8dd8bc13a83139af6b7709f0998d4d1.exe
Resource
win7-20221111-en
General
-
Target
ff0b398c48e8b824aee33f92f088ab9fb8dd8bc13a83139af6b7709f0998d4d1
-
Size
1.2MB
-
MD5
9535e3d40839ba7b7b20551244669930
-
SHA1
28cf92c37d567e5ea46c815834aa99899107141c
-
SHA256
ff0b398c48e8b824aee33f92f088ab9fb8dd8bc13a83139af6b7709f0998d4d1
-
SHA512
dae02d9266945c13c87cb37d840adadb58cce043abcd6b43710cf7d047ebb3946fbe7cbcdeac8aac7d0ee59eba05ace097ef27cc8d7a62273597e2b75545252d
-
SSDEEP
24576:laJQ3ODUGMyeBgBh/NjhUALz6CpJRAGgtDo7jG0F2tLEmjWMYh5y:lYQ3UrMTBg9jhfz6wJjgi7K0MqmHsy
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ff0b398c48e8b824aee33f92f088ab9fb8dd8bc13a83139af6b7709f0998d4d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 238KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 960KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcgfe Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE