Behavioral task
behavioral1
Sample
caeea306931c748d3a5eec9b9d73d7e3654a8134560e198d22332f27911b1e77.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
caeea306931c748d3a5eec9b9d73d7e3654a8134560e198d22332f27911b1e77.exe
Resource
win10v2004-20230220-en
General
-
Target
caeea306931c748d3a5eec9b9d73d7e3654a8134560e198d22332f27911b1e77
-
Size
88KB
-
MD5
b9d1783174852b5fe54426a512a70f0f
-
SHA1
6f1d5fe8be392d1c354db0a1247e924249da7488
-
SHA256
caeea306931c748d3a5eec9b9d73d7e3654a8134560e198d22332f27911b1e77
-
SHA512
bc503401c6979fcdaaa1db11fd120c942a11cf8a6f0151c6b3d51f3742dd8c5d8316fd8f362691677108567b0060b2bfc89cdb834ebc53c6a88b55748b5153c9
-
SSDEEP
1536:nNUTKAK5b+m6OAlzxve5RSKrj43gYquXUW69mbDzsQQFS4GHCMeSa:nafeb+mzADwRuQYqfcbDzAGHfeSa
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
caeea306931c748d3a5eec9b9d73d7e3654a8134560e198d22332f27911b1e77.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 47KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE