Behavioral task
behavioral1
Sample
de2f882e8f3f2be9d0adbef43961a8874085558b5c9e7bc748b707119e7b11c8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
de2f882e8f3f2be9d0adbef43961a8874085558b5c9e7bc748b707119e7b11c8.exe
Resource
win10v2004-20230221-en
General
-
Target
de2f882e8f3f2be9d0adbef43961a8874085558b5c9e7bc748b707119e7b11c8
-
Size
1.1MB
-
MD5
c4e68bd69cf0a7fb836a3491128614bc
-
SHA1
d1183e2a6a1604d043873753dfd029aaf59e3f64
-
SHA256
de2f882e8f3f2be9d0adbef43961a8874085558b5c9e7bc748b707119e7b11c8
-
SHA512
721be8c373dc4d1ca57cceb516d4344b9f163b084576c5e257a0f0ffd1dc24fb563211015f8f4bd4f23fd8935748f2c935e6a2ec71691f7fc3dea4801c0da15d
-
SSDEEP
24576:RAXfwjjoM3clBopj661JQpIdHB1Bj0yozBtQk3aY5UbDzdY7r:eXfwjjoM3clU3hdHvNwB/aY2DdY3
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
de2f882e8f3f2be9d0adbef43961a8874085558b5c9e7bc748b707119e7b11c8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 807KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 99KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 186KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE