Behavioral task
behavioral1
Sample
c8379c0973f3a485ebcebeb298a62ac4f0c2d05ecf729d61d19903c829fe788a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c8379c0973f3a485ebcebeb298a62ac4f0c2d05ecf729d61d19903c829fe788a.exe
Resource
win10v2004-20230221-en
General
-
Target
c8379c0973f3a485ebcebeb298a62ac4f0c2d05ecf729d61d19903c829fe788a
-
Size
5.3MB
-
MD5
1cbdcfabbc47247c3087564addce407a
-
SHA1
0298f6eb576830c6110ea170c3262169699cf65e
-
SHA256
c8379c0973f3a485ebcebeb298a62ac4f0c2d05ecf729d61d19903c829fe788a
-
SHA512
1571ebc9549c2e6f9d0b52b8e90a7a6c7e42d819b32b0b2c3d831bd7a0dfabe90988ab3490c1b6bd50af4384488de53c8501ae15b2a78c5263f04ff21be28cb5
-
SSDEEP
98304:38YhlXeVL0f9rFAQE9DVC0oDht0xEfJmjTI52J/3CkP9XlDwd5rI:NuVidFyDVCXDht7fJmjkU/nEd5rI
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
c8379c0973f3a485ebcebeb298a62ac4f0c2d05ecf729d61d19903c829fe788a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 849KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 109KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 1024KB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 2.0MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE