Behavioral task
behavioral1
Sample
1f9ee45510f3795ebe258329d720aa035b5693368bdd334863cf37a1e5c87f1f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1f9ee45510f3795ebe258329d720aa035b5693368bdd334863cf37a1e5c87f1f.exe
Resource
win10v2004-20230220-en
General
-
Target
1f9ee45510f3795ebe258329d720aa035b5693368bdd334863cf37a1e5c87f1f
-
Size
5.1MB
-
MD5
f5bfab61c8775acc2bee5fa2c44720f9
-
SHA1
cda285cf45c0ac73d32710778d4c5328053c72a9
-
SHA256
1f9ee45510f3795ebe258329d720aa035b5693368bdd334863cf37a1e5c87f1f
-
SHA512
d7148720e74014d263b1b1cf887ef8c9a3b78a42362c54b0ead17fc799f3cabb009a8c23fd7ba187a7f070bfeefc5d5a36536bcbc9f6800899132c8efdf110d5
-
SSDEEP
98304:DMKh7w1IkQi9gZdQMVckRaMK0i0zZV9ENRV9e9JVVFD8tCgVQzF4PWCr5ubT5qa:DM67OPWIQ0MK0JzDb9HVFD8tCgkFPh
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
1f9ee45510f3795ebe258329d720aa035b5693368bdd334863cf37a1e5c87f1f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.9MB - Virtual size: 18.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 20KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 52.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE