Behavioral task
behavioral1
Sample
3014449c8775ed0c999747dde81241c87fea84b94c59fff6fb35d18c81134f87.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3014449c8775ed0c999747dde81241c87fea84b94c59fff6fb35d18c81134f87.exe
Resource
win10v2004-20230220-en
General
-
Target
3014449c8775ed0c999747dde81241c87fea84b94c59fff6fb35d18c81134f87
-
Size
5.3MB
-
MD5
5ccfec818067d583a3aa81381addba62
-
SHA1
206681289e9660675d700ddc022648ec525616c3
-
SHA256
3014449c8775ed0c999747dde81241c87fea84b94c59fff6fb35d18c81134f87
-
SHA512
4695701eed60e752a83343d3a41c1374a661b5fe3a7934eca19cb0b0a03d696a3c3fc46de46729a2ac1b4e1518e35bd69385f6a6b94d4d5c7e9f5a976c982a2b
-
SSDEEP
98304:mxtj5KDjbpgKPRSymX8oOXh8WUsU1kxBJfNKju6KIHL9hO0xian5A/H8W:mwjVgKPR2X8oOdUQxB3OuNIr3O4ianq
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
3014449c8775ed0c999747dde81241c87fea84b94c59fff6fb35d18c81134f87.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3.1MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 214KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE