Behavioral task
behavioral1
Sample
bfb8286490735f777b64ccdf4fa211e53b2ceb7a8d6cd1929760c211c58b972f.exe
Resource
win7-20230220-en
General
-
Target
bfb8286490735f777b64ccdf4fa211e53b2ceb7a8d6cd1929760c211c58b972f
-
Size
355KB
-
MD5
8ede2c513718db9aff6af9e587b24410
-
SHA1
e32bcf8d62241a66ba3f748af0b505547b16de8c
-
SHA256
bfb8286490735f777b64ccdf4fa211e53b2ceb7a8d6cd1929760c211c58b972f
-
SHA512
d2bdf4ffe8ca3905f08da6a88d0289c9a3699ccb78a6aa03b294aac413fe340ee773946896e27a333867636d4974828ef62455b41fcbdd926ee0459304a04961
-
SSDEEP
6144:mhb8VSeoQZP0MPkUonj5tQHTFdkelDnUEA6Fyz1+KqW40D1Kp4StY6Vw7uX:2IweoQR0MPktjsHUZeWD0Z7VQ
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
bfb8286490735f777b64ccdf4fa211e53b2ceb7a8d6cd1929760c211c58b972f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE