Behavioral task
behavioral1
Sample
7510f207bb39ebd5dda4f3422e4b29d29877c502d40103d90b7b5f118d6eb8b9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7510f207bb39ebd5dda4f3422e4b29d29877c502d40103d90b7b5f118d6eb8b9.exe
Resource
win10v2004-20221111-en
General
-
Target
7510f207bb39ebd5dda4f3422e4b29d29877c502d40103d90b7b5f118d6eb8b9
-
Size
5.1MB
-
MD5
671e2ce3f89806a58d0f72b700d7d16c
-
SHA1
3102493375029010d65624d473a724ae1cb5f1b4
-
SHA256
7510f207bb39ebd5dda4f3422e4b29d29877c502d40103d90b7b5f118d6eb8b9
-
SHA512
30060f819df30f34c7d1a6506bc3d3e21b30c694032a151b9bf1abb9c17914eb2a734884329661cd5a3e90122bef1e9dacad31972603788cf20876b68d87e5bc
-
SSDEEP
98304:rkDwBNjD6r/iVVv83KuWfXxzNvaG7y2jeSg9DrVZGRliOk230Va33vdQ9sPU:QwzqyVvDXLva+fevZr23VnM
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
7510f207bb39ebd5dda4f3422e4b29d29877c502d40103d90b7b5f118d6eb8b9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.1MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 26KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 221KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.7MB - Virtual size: 23.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE