Behavioral task
behavioral1
Sample
faad09e86a82d43545eb2e5f7155f9de6b449dec90c163337d0cc5e578db6390.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
faad09e86a82d43545eb2e5f7155f9de6b449dec90c163337d0cc5e578db6390.exe
Resource
win10v2004-20230221-en
General
-
Target
faad09e86a82d43545eb2e5f7155f9de6b449dec90c163337d0cc5e578db6390
-
Size
5.7MB
-
MD5
157eeae54cbbd64c68dffa9afd621200
-
SHA1
0aa05b0dc6eb66723757f00edbcee84e146400d2
-
SHA256
faad09e86a82d43545eb2e5f7155f9de6b449dec90c163337d0cc5e578db6390
-
SHA512
c866e94074fe18e848af6bb664fc1f3d80f6a100ee10a1d379a34dccce6b12e97b2ec25b4f88ca90a58cc0d2d0271b822661940c536e9698d9a6fda4cb20f3fa
-
SSDEEP
98304:kJbQY+Jhc8rW9Fx8oIa1kir1Ih1cjWsRD3mol00aW5QuWsObVThNGVaqaKu96rbJ:KfF8rgjRkv4Wst3mk00aW5QuWsO4Ta7z
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
faad09e86a82d43545eb2e5f7155f9de6b449dec90c163337d0cc5e578db6390.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UnPackEr Size: 556KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
By Size: 5.1MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LoveBoom Size: 29KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE