Behavioral task
behavioral1
Sample
bf4d67d0babd031ab6f7755549899d83183a1010a96d69ff06f209773db12f53.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bf4d67d0babd031ab6f7755549899d83183a1010a96d69ff06f209773db12f53.exe
Resource
win10v2004-20230220-en
General
-
Target
bf4d67d0babd031ab6f7755549899d83183a1010a96d69ff06f209773db12f53
-
Size
262KB
-
MD5
c01293919e17abc7ec81a39b5ddc9829
-
SHA1
0ea90592554baa97aba14a93014faad7e29654bd
-
SHA256
bf4d67d0babd031ab6f7755549899d83183a1010a96d69ff06f209773db12f53
-
SHA512
b5891fb18bd3778ec698e6db8ec9e2c63e617385af777fa395ce5ab5ceb8d11fe7f6c42b19671621c7d4c613628be5320d87760bba2cf2fa69db3f9ad8df385d
-
SSDEEP
6144:ccGpZaraB2WWLsOMibVaPH+1YjZGlmo1oLgNNN/s:cc6ZaWB23sWH+Z6m/gNNN/s
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
bf4d67d0babd031ab6f7755549899d83183a1010a96d69ff06f209773db12f53.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 202KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE