Behavioral task
behavioral1
Sample
2a2f2e6f95439461a29843ce0a5f6ac6aa089221bb98cebf20bba7c557d4a3d5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2a2f2e6f95439461a29843ce0a5f6ac6aa089221bb98cebf20bba7c557d4a3d5.exe
Resource
win10v2004-20230220-en
General
-
Target
2a2f2e6f95439461a29843ce0a5f6ac6aa089221bb98cebf20bba7c557d4a3d5
-
Size
576KB
-
MD5
8ec652548f6d50126c334a4c0b340af8
-
SHA1
4cb8f907b6cf8a8e5db0c0c14d0f8c6b45886c12
-
SHA256
2a2f2e6f95439461a29843ce0a5f6ac6aa089221bb98cebf20bba7c557d4a3d5
-
SHA512
ff0585d7eb6f93934aff8f6317eb9a4c720c602288f51e34c8259199b01cf62c98a6ac20df0d9f03024cb9c8b45d0017f62dce4d705572d0636df3c745d1b53f
-
SSDEEP
12288:64k8lrTf0ts6icmAk5iCXfkKBt2banLwhzTJ4C:6gvCJmAkLr2mnEzTJb
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
2a2f2e6f95439461a29843ce0a5f6ac6aa089221bb98cebf20bba7c557d4a3d5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 461KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tianji Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE