Behavioral task
behavioral1
Sample
87e23de08b3f474861c7ad837553dde56ddaacc5313608e79bf21d5244fbf493.exe
Resource
win10-20230220-en
General
-
Target
87e23de08b3f474861c7ad837553dde56ddaacc5313608e79bf21d5244fbf493
-
Size
3.9MB
-
MD5
081c41f987d30e1eb26134cadee950cc
-
SHA1
15ecfdf649bc938fac1a2d8f373f7a8a5416adc6
-
SHA256
87e23de08b3f474861c7ad837553dde56ddaacc5313608e79bf21d5244fbf493
-
SHA512
f11c849b8d91ac78ea363e974d2a5166b92246e9b0b4544eacda01c3a798cafb11eec2f5370fbf0b887cd772a362c5108ec8c112d53875bbb38da170050a4e7f
-
SSDEEP
98304:pm1/Ve5YX6qFzsr6iOWxjwphj21EI1zRbwEwa:+e5YXDRsrHOOjwDj21EI1N
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
87e23de08b3f474861c7ad837553dde56ddaacc5313608e79bf21d5244fbf493.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 507KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE