Behavioral task
behavioral1
Sample
fcb53ace78e6feba7b5d62760ff6bf4eb89a333cbc72b35d87ca8d1254f57202.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fcb53ace78e6feba7b5d62760ff6bf4eb89a333cbc72b35d87ca8d1254f57202.exe
Resource
win10v2004-20221111-en
General
-
Target
fcb53ace78e6feba7b5d62760ff6bf4eb89a333cbc72b35d87ca8d1254f57202
-
Size
3.6MB
-
MD5
a9bb0559d59fd476c4cbbcd6ed64e6dd
-
SHA1
01e4827e99e1fcb5f6d42551835802a00097b1da
-
SHA256
fcb53ace78e6feba7b5d62760ff6bf4eb89a333cbc72b35d87ca8d1254f57202
-
SHA512
09126c7e34c06abfc0c3103a736c9123d76c3872ec7a1c0078c1131e4c2f59acf88ea85ed55f50a1bb607f1eb84faa3d19696d63026d9a15444493af2a313daf
-
SSDEEP
98304:LlW/XuQlDkn7qUTWXAFe3GQ+G03U2JsvxnFvH+hLZmYEyT:p8jkEAFhFD2v/eOYTT
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
fcb53ace78e6feba7b5d62760ff6bf4eb89a333cbc72b35d87ca8d1254f57202.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.5MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 148KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE