Behavioral task
behavioral1
Sample
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe
Resource
win10v2004-20221111-en
General
-
Target
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f
-
Size
847KB
-
MD5
e3bc50be39822896959209fceacdb19c
-
SHA1
6a2afe67b1345a08f635ea7164f401bb9204ae06
-
SHA256
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f
-
SHA512
c23f768c8e5d26a4994dfdc4c990f747cc7196e51454174b1dea8b4968c9d5997225a21b21fc4e02cf9726f594f3a4576c4b08d7a630396d9f742f2aee5a44c9
-
SSDEEP
24576:WiF+OIM+OBV2QnddgubtBw5XIEtAR72ii40vLNzT:ZFxJzBYQdTbDwNC7hi4ULN/
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
3a9044a217d8a59754e7ea8f9fb2b1b75344999c82ef7fe92ccf0c6bed2a908f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 763KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE