Behavioral task
behavioral1
Sample
7d62c30f0ce52ba43406e9215d100b2b76efd572696662e288a3f9d21dadd6e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d62c30f0ce52ba43406e9215d100b2b76efd572696662e288a3f9d21dadd6e7.exe
Resource
win10v2004-20221111-en
General
-
Target
7d62c30f0ce52ba43406e9215d100b2b76efd572696662e288a3f9d21dadd6e7
-
Size
5.6MB
-
MD5
b4247f8152440e60627380f0b1236bb5
-
SHA1
bbd4f343315f6726cbafffe76486290320acc7f7
-
SHA256
7d62c30f0ce52ba43406e9215d100b2b76efd572696662e288a3f9d21dadd6e7
-
SHA512
73fdbdf623fc8e0035ae18aff7dfb79c846cfe3b1bf2146a0de80b8fc7ea0f0913850a73208e7df36f97fa2a397a1b02561e9e73628e06a200c2f6b6ca24201b
-
SSDEEP
98304:qVYN8f0ROquThWsIXB5zPvnbkixXtxY/bgZNzIlIxsEJuPm44sjnwGDWxCxHkU/h:qqNE48t8DzHnYixXccZNz6EImqwLCLN/
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
7d62c30f0ce52ba43406e9215d100b2b76efd572696662e288a3f9d21dadd6e7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 238KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5.2MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE