Behavioral task
behavioral1
Sample
1f21338ee1d3c0bb7a8525f7bc15132b5b3103711235ff8ab71215e2d616e94c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f21338ee1d3c0bb7a8525f7bc15132b5b3103711235ff8ab71215e2d616e94c.exe
Resource
win10v2004-20220901-en
General
-
Target
1f21338ee1d3c0bb7a8525f7bc15132b5b3103711235ff8ab71215e2d616e94c
-
Size
3.7MB
-
MD5
1f6c3c5acc8d596a4c4379fb2a12a4a6
-
SHA1
f3160c5f5de246aa533c749c105a8e7778796a6d
-
SHA256
1f21338ee1d3c0bb7a8525f7bc15132b5b3103711235ff8ab71215e2d616e94c
-
SHA512
5962eafafb29f7919e835a0bf2b42c7f4baea4e5340feacf2d509a96b0e7492c6289440acba24b496dd35cc44459bd2bb0c1f1656a29622d5ec6eacb77f25bab
-
SSDEEP
49152:a6Kzy2v7khevP3PxBkcZjatompffwYaQuOEyP/Z4In1mEb9IH9q4Y/SmeMBWS8nx:FKe2v7Hv7kYji1ZP7mlH9pOeMUS8n4
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
1f21338ee1d3c0bb7a8525f7bc15132b5b3103711235ff8ab71215e2d616e94c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE