Behavioral task
behavioral1
Sample
8841458fda531bec5b3b5adf6aa9749a8556d03591dce2d5957330e6e0995175.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8841458fda531bec5b3b5adf6aa9749a8556d03591dce2d5957330e6e0995175.exe
Resource
win10v2004-20230220-en
General
-
Target
8841458fda531bec5b3b5adf6aa9749a8556d03591dce2d5957330e6e0995175
-
Size
464KB
-
MD5
818e7bd8a8c33e931dd4a9bd2471e05e
-
SHA1
da755dd04cbce0bf88ddf40d3f3c3392938a79f4
-
SHA256
8841458fda531bec5b3b5adf6aa9749a8556d03591dce2d5957330e6e0995175
-
SHA512
c586f8af3e4eaba235f5acfffb40cfe68ccea2b0917ac338ae96ad0978655fe06289e4637d0a2396608ed4dec1b91e71aed984526561e40492490f4bb904571b
-
SSDEEP
12288:BQ+5NhniCrgUMnTL+IVDMn5IlTOZfY3plXMNrhvb:eqiCrgUmTLRVQ5IUZ07w
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
8841458fda531bec5b3b5adf6aa9749a8556d03591dce2d5957330e6e0995175.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xvlk Size: 28KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xvlk Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xvlk Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 403KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xvlk Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xvlk Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xvlk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE