Behavioral task
behavioral1
Sample
fee9f28da87282330f91f5d846d873d5b42f595ea34031e59dd590396051c082.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fee9f28da87282330f91f5d846d873d5b42f595ea34031e59dd590396051c082.exe
Resource
win10v2004-20220901-en
General
-
Target
fee9f28da87282330f91f5d846d873d5b42f595ea34031e59dd590396051c082
-
Size
3.3MB
-
MD5
77175f445db5d5173ef6b272a6ab2d84
-
SHA1
77ecc45cb5d84996c1414d1144ea092b3c80c68b
-
SHA256
fee9f28da87282330f91f5d846d873d5b42f595ea34031e59dd590396051c082
-
SHA512
b04ed06bae2343932231be8b1076ff4fd7ed8249e277937e8514c671ea661a3f9bd9992340becd1f0747a0406e283d2c40df7fde806751091b8cb66e68c1c536
-
SSDEEP
98304:rAZFCLjYPPoerAvmxb1BwjcEcalyNljzaMuY:rUUYPPD4mxb1B+cNaly7Ki
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
fee9f28da87282330f91f5d846d873d5b42f595ea34031e59dd590396051c082.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.7MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 35KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 158KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE