Behavioral task
behavioral1
Sample
ef403e7deaa05a8417efdeebd32bf5a9cb762a8283517690aed665ec90f9995b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef403e7deaa05a8417efdeebd32bf5a9cb762a8283517690aed665ec90f9995b.exe
Resource
win10v2004-20220901-en
General
-
Target
ef403e7deaa05a8417efdeebd32bf5a9cb762a8283517690aed665ec90f9995b
-
Size
1.9MB
-
MD5
0f2fa2f39319574404f1c6cdce89d450
-
SHA1
abb7647dbd3515c12239e80cdce4fa4c2948a965
-
SHA256
ef403e7deaa05a8417efdeebd32bf5a9cb762a8283517690aed665ec90f9995b
-
SHA512
05cf6d638bd402c1e129cf9e5a557054e1291bd25bdb94a757ac336e774603183f9f90ee4f8bb591c76abde30166cce10165c571caff6532bf866f83a62e57ad
-
SSDEEP
49152:tY9BpaXR8Nw6Fawvto+y6sV1VSdnWBIsKrn+gR4T5Dnq9Ih/fysjQMPH:tY9BARwFa6tby6sDS1sEnDW5LjhzQMPH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ef403e7deaa05a8417efdeebd32bf5a9cb762a8283517690aed665ec90f9995b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 638KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE