Behavioral task
behavioral1
Sample
6b252b74744d30d825bb60aa6a2f30e40403a59a9d61ecda0d4da5fa5cf697ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b252b74744d30d825bb60aa6a2f30e40403a59a9d61ecda0d4da5fa5cf697ae.exe
Resource
win10v2004-20220812-en
General
-
Target
6b252b74744d30d825bb60aa6a2f30e40403a59a9d61ecda0d4da5fa5cf697ae
-
Size
91KB
-
MD5
506d7005294c31de4f827a0d56a0ae58
-
SHA1
194f3d034b57fe0945ff573ecb5f273288f3681b
-
SHA256
6b252b74744d30d825bb60aa6a2f30e40403a59a9d61ecda0d4da5fa5cf697ae
-
SHA512
91a3eb3655ec670cd1955b81db9c392a2c0accbdaba859e8560bb69ab43d0ad1e80067a708dab989618fa679dbece87a520b8261f121d8f5cb44084c60f6e810
-
SSDEEP
1536:YU2H/TM9Dmk8E8QZM5MSyS//NRrBZ3MjbrxZRGrhVA80bH4:EH/A5mLRM+btZ3gx/GPB0bY
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
6b252b74744d30d825bb60aa6a2f30e40403a59a9d61ecda0d4da5fa5cf697ae.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 76KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE