Behavioral task
behavioral1
Sample
1129f1391e49e87f0d00bb356069fd803dd595138102fdcfb4b2e2aa720c63c0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1129f1391e49e87f0d00bb356069fd803dd595138102fdcfb4b2e2aa720c63c0.exe
Resource
win10v2004-20221111-en
General
-
Target
1129f1391e49e87f0d00bb356069fd803dd595138102fdcfb4b2e2aa720c63c0
-
Size
519KB
-
MD5
07848923e425a9d0ba2c7cd00579c7bd
-
SHA1
009ef13b332e6328591afdf0407c3beab0508966
-
SHA256
1129f1391e49e87f0d00bb356069fd803dd595138102fdcfb4b2e2aa720c63c0
-
SHA512
5d560411be595aeee6ce1fe11485e32becd4ac132635b7f9fdee1f7a3432036729470ddee88b6d90d98e141ec6cc2be9e7e30fe513fd23ccd8e0ebf7568cb102
-
SSDEEP
12288:GhhKL0kPtUVRT73ZfMJ2qYdyc47hYgDpEppmaChWYU:GhhKLhPuVR/ZSueDpEppG3U
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
1129f1391e49e87f0d00bb356069fd803dd595138102fdcfb4b2e2aa720c63c0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 385KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE