Behavioral task
behavioral1
Sample
8b592b7ac5e00bcd00987290db0529e06c810c428607a6a7144e5a3f30a1cb41.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8b592b7ac5e00bcd00987290db0529e06c810c428607a6a7144e5a3f30a1cb41.exe
Resource
win10v2004-20221111-en
General
-
Target
8b592b7ac5e00bcd00987290db0529e06c810c428607a6a7144e5a3f30a1cb41
-
Size
2.8MB
-
MD5
4e8b972888573f86dd8b9f4fda5701af
-
SHA1
7d9575f01e118db3e382245234d2c6e277eaadad
-
SHA256
8b592b7ac5e00bcd00987290db0529e06c810c428607a6a7144e5a3f30a1cb41
-
SHA512
ab97568177b3106db0751d5b2bc18b2c8392acf783baa9edbe9b46514c6d9407497193d55938e839cca30e50f8c2fec29525bd4e0f8c71cd09c08017af000762
-
SSDEEP
49152:XqbU3vCA370xiByrtdQEBZtr8Wr5oT9Y9Ob3J/gEeWHmnuZ1:6blA3AiByJHB38W9o4OTBgBWHJZ
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
8b592b7ac5e00bcd00987290db0529e06c810c428607a6a7144e5a3f30a1cb41.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.4MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 76KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE