Behavioral task
behavioral1
Sample
a5d7b2eeb44b159a3eab4e67249f42b3df595dc99dd9b2b504d2d8c76d359964.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a5d7b2eeb44b159a3eab4e67249f42b3df595dc99dd9b2b504d2d8c76d359964.exe
Resource
win10v2004-20230220-en
General
-
Target
a5d7b2eeb44b159a3eab4e67249f42b3df595dc99dd9b2b504d2d8c76d359964
-
Size
368KB
-
MD5
3d5c00da87028c92e0b17733570c5b47
-
SHA1
913361cc6219bed636d0464df2fcf06c94005faf
-
SHA256
a5d7b2eeb44b159a3eab4e67249f42b3df595dc99dd9b2b504d2d8c76d359964
-
SHA512
b369dfa45418eb3724288e0e52396731ef1f9405daf27bf1453ad1f072b39542451bde53944ca1cd483dfc0f27b6b1dfe281725c79976779aee0dc376de16e62
-
SSDEEP
6144:3l9vTvq3/dajCIfViWFnR9nRFXr96XFTaOzOtZRgnsSi7x:3jrSV0CIfViMR9RDkTwMO
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
a5d7b2eeb44b159a3eab4e67249f42b3df595dc99dd9b2b504d2d8c76d359964.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 313KB - Virtual size: 840KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE