Behavioral task
behavioral1
Sample
407609987345550c854fc2bb8694d959db0acb3bf80a8f48a4f9dbd3b5082787.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
407609987345550c854fc2bb8694d959db0acb3bf80a8f48a4f9dbd3b5082787.exe
Resource
win10v2004-20230220-en
General
-
Target
407609987345550c854fc2bb8694d959db0acb3bf80a8f48a4f9dbd3b5082787
-
Size
799KB
-
MD5
c04cffdd613836cfda55f03354bc3a3a
-
SHA1
3d07ceed5eef68fa51448d8823a44715f66c9b33
-
SHA256
407609987345550c854fc2bb8694d959db0acb3bf80a8f48a4f9dbd3b5082787
-
SHA512
b68b0fe81cb127ca5692b271df87bccdb713c8602b588c6add59333278eb65b13f677cec6a34fb9523e078c76fcfec872823ee08969881d13d35838575fa5b41
-
SSDEEP
24576:mGxh9QGOacIfOu1RE/os2yrA6nJuhh+0:m7GC0Ou8/RLrbnJuhhX
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
407609987345550c854fc2bb8694d959db0acb3bf80a8f48a4f9dbd3b5082787.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 331KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 91KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 348KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE