Behavioral task
behavioral1
Sample
853295cfbf6cfc9f89509908899017dca99751814d1f3d386f932f8c21081823.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
853295cfbf6cfc9f89509908899017dca99751814d1f3d386f932f8c21081823.exe
Resource
win10v2004-20230220-en
General
-
Target
853295cfbf6cfc9f89509908899017dca99751814d1f3d386f932f8c21081823
-
Size
3.2MB
-
MD5
adbba51ad27a75855914410e692e87b1
-
SHA1
f677ea941b1bf726ae974971b6a9e2e7b9f898fa
-
SHA256
853295cfbf6cfc9f89509908899017dca99751814d1f3d386f932f8c21081823
-
SHA512
8b404cfd10e71c545d99e38be3ccfb5dcfd773fa0a441ff95039fe83af8a4b4c8196425542e8f2dc1079f7e8f03f1f8dc92d3558a3a7ba529ce3826da175072a
-
SSDEEP
49152:7t3gdAjshFEjfzs8iOlqPyx6cL1nMSXN/7KlBc0boXacM2L9xQWpXbPXlu/9:7hgdAjH96PyTeAN/7gcUuQWpXrXl
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
853295cfbf6cfc9f89509908899017dca99751814d1f3d386f932f8c21081823.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.3MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 23KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 882KB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE