Static task
static1
Behavioral task
behavioral1
Sample
4591591babaaaa968f5475a00a0a5a67a116840705f159c0aeeffd4efa772692.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4591591babaaaa968f5475a00a0a5a67a116840705f159c0aeeffd4efa772692.exe
Resource
win10v2004-20220414-en
General
-
Target
4591591babaaaa968f5475a00a0a5a67a116840705f159c0aeeffd4efa772692
-
Size
2.5MB
-
MD5
81c0f0bd74cc7e55d100ac2d2f17a3f8
-
SHA1
95b9105f7ef260e2d4544cb2f64db5cea4e73cb7
-
SHA256
4591591babaaaa968f5475a00a0a5a67a116840705f159c0aeeffd4efa772692
-
SHA512
cc8bbe2cf061c261b495a2bf57b088cd99a4e7520fde0202c7333effd9f5e7e36612510a0b0e11e198cc75cb0ef62dfd8f89c8e9f36d302b387f920b5703aadb
-
SSDEEP
49152:0Ttd40rtT9oJdXN0BMOwLloBrugnydB3I:434JdXN0B7+s5WC
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
4591591babaaaa968f5475a00a0a5a67a116840705f159c0aeeffd4efa772692.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE