Behavioral task
behavioral1
Sample
701570f284b4e4ba51c407a8bf2c48fecf7b3d903c1d7fdc7b36c499e216cf53.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
701570f284b4e4ba51c407a8bf2c48fecf7b3d903c1d7fdc7b36c499e216cf53.exe
Resource
win10v2004-20220812-en
General
-
Target
701570f284b4e4ba51c407a8bf2c48fecf7b3d903c1d7fdc7b36c499e216cf53
-
Size
1.5MB
-
MD5
40e70af2f17b458e75b7891355557b88
-
SHA1
c04d8eb0eb01465c9e48c0dbf9ee359b29792b36
-
SHA256
701570f284b4e4ba51c407a8bf2c48fecf7b3d903c1d7fdc7b36c499e216cf53
-
SHA512
fb78fd6fe68bc726f9d976572ac03f3f91542aaa5e24af1ba1516d26515c8c4083b6f8b3116fc4ffb0488c6d8c4779748fe843d68f88d7c9dffe468dc19d620c
-
SSDEEP
24576:CgMRXundFh8AY4YiKYXfY3BaVKuhe427WMNGbeemac94y/bprGp95pcQo:iROb7v4YXmm1kJvemx9nrGp95pw
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
701570f284b4e4ba51c407a8bf2c48fecf7b3d903c1d7fdc7b36c499e216cf53.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.4MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE