Behavioral task
behavioral1
Sample
e3527b7526ec85ecb3862a7c336ae6c96e626948fa2803c6bc1a0741fa88fcfa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3527b7526ec85ecb3862a7c336ae6c96e626948fa2803c6bc1a0741fa88fcfa.exe
Resource
win10v2004-20221111-en
General
-
Target
e3527b7526ec85ecb3862a7c336ae6c96e626948fa2803c6bc1a0741fa88fcfa
-
Size
1.1MB
-
MD5
22eb8df6dddb60566aeedfcf722c6c45
-
SHA1
38d701e2b880aa471964e4f7fd9bc9e9d34147c4
-
SHA256
e3527b7526ec85ecb3862a7c336ae6c96e626948fa2803c6bc1a0741fa88fcfa
-
SHA512
9c138d56817ee63ed46eb624246ef7aacc362d162497bcc536efc5068cb6e38d88713384711e67f045469ffb86c043e983fd31df3cd0a1f1add969c9489356cb
-
SSDEEP
24576:n8FXGFaccX6wfBOLwx70kSVqS8DTXXzgJZwMCa+qYx7UbDzdYcb:8lGpK6JkOV8DTXzCt3RDdYcb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e3527b7526ec85ecb3862a7c336ae6c96e626948fa2803c6bc1a0741fa88fcfa.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 803KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE