Behavioral task
behavioral1
Sample
ec44807fe59a8b9696ee3d66782104c9fd1165754f2fad10e1f9b801f993156d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ec44807fe59a8b9696ee3d66782104c9fd1165754f2fad10e1f9b801f993156d.exe
Resource
win10v2004-20220812-en
General
-
Target
ec44807fe59a8b9696ee3d66782104c9fd1165754f2fad10e1f9b801f993156d
-
Size
340KB
-
MD5
b726d7c8bdab2533d2504fb017aa94c7
-
SHA1
2563126bf6e9fd6d01320ca499ce55238be457eb
-
SHA256
ec44807fe59a8b9696ee3d66782104c9fd1165754f2fad10e1f9b801f993156d
-
SHA512
da8510349bae2e4e107619826b78f915a420dd3bcf6ac259bc020b3aeb7427271d4175df73e7d0c610e254da4eb3fa3e2c10afa27b054297e4090e5150a52e5e
-
SSDEEP
6144:/7PkShRiUR2+VJ8sgtDg6dqugDR0IcUjKTc+hhc6Szxr30GdDLR3uyGuEJnk:DZhMURg75IX1+kld0CDtewEJk
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ec44807fe59a8b9696ee3d66782104c9fd1165754f2fad10e1f9b801f993156d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 247KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 54KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE