Behavioral task
behavioral1
Sample
d36fec2448c511a43d1ccf0e16b1e4ab47090091b9a0be7530102306bb0c07c4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d36fec2448c511a43d1ccf0e16b1e4ab47090091b9a0be7530102306bb0c07c4.exe
Resource
win10v2004-20230220-en
General
-
Target
d36fec2448c511a43d1ccf0e16b1e4ab47090091b9a0be7530102306bb0c07c4
-
Size
563KB
-
MD5
1f83e432f2c0e7ba575292f669256914
-
SHA1
d09dcaf2c49fea524db78b42f0a078d57d58f784
-
SHA256
d36fec2448c511a43d1ccf0e16b1e4ab47090091b9a0be7530102306bb0c07c4
-
SHA512
13068036428ea90aa11c91abeb81709fa8114ebc38c22a319772d426128c80cc986e38e15e9665f545992d6d6b54afa11c31ca8c0be2967df0ccc06046a1032e
-
SSDEEP
12288:URvUIvJwNqMnTmx5gQLqE47jusAlbDI5LRyFA7r05YAwIMKAe8iellDB2lEU:URTJw/mxqQLXojvQGFqAyYAxMKx8ielN
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
d36fec2448c511a43d1ccf0e16b1e4ab47090091b9a0be7530102306bb0c07c4.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 351KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 35KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 30KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE