Behavioral task
behavioral1
Sample
8d68ab3636401596ce32855c8bb8274f421ce71194936b166b2e862962d81905.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8d68ab3636401596ce32855c8bb8274f421ce71194936b166b2e862962d81905.exe
Resource
win10v2004-20220812-en
General
-
Target
8d68ab3636401596ce32855c8bb8274f421ce71194936b166b2e862962d81905
-
Size
3.0MB
-
MD5
4eef6045bc7ce05160968e8ef3c6a1e8
-
SHA1
ce8f0dea1814aaec50304e689e3ed7ae6a2a7639
-
SHA256
8d68ab3636401596ce32855c8bb8274f421ce71194936b166b2e862962d81905
-
SHA512
49e25b3a86199c724ef7ae578bd902b665a6523bcfdbcc523cc8dede8506401563ff4ffccb63ac71ba91d4cd4783a9e58f320fd01dabae28255eb117df6e6ed8
-
SSDEEP
98304:uCGLd+sOF5e1QebnhRqstDn2h1VDW+OMpo:uTIsi5AxbhwsMvdW+OMp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
8d68ab3636401596ce32855c8bb8274f421ce71194936b166b2e862962d81905.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.5MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 78KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 449KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE