Behavioral task
behavioral1
Sample
9d9577546d066745f1224b5ba11b7e26dfbab967e5d09b00f240defeb0261128.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d9577546d066745f1224b5ba11b7e26dfbab967e5d09b00f240defeb0261128.exe
Resource
win10v2004-20220812-en
General
-
Target
9d9577546d066745f1224b5ba11b7e26dfbab967e5d09b00f240defeb0261128
-
Size
895KB
-
MD5
6af6824b659b0c8e2ad2236eafc7fa2a
-
SHA1
8c2042e477bd39ee499d957747d83de811c3207e
-
SHA256
9d9577546d066745f1224b5ba11b7e26dfbab967e5d09b00f240defeb0261128
-
SHA512
4097d52dcf4f53e0f70391198aa8fb2be6feef777f00b81bce5ccd4eaa85c4ea0f4f4abb12ca3188fd86127cb8f07768a8960fb2a7c81f5b2ec315820d1aa397
-
SSDEEP
24576:49MiYMY0QREc1lWyJEKtmNL7qS2+dVd9rISbA393b4/2A:3h9D4yCKgxHb3r1ctrc2A
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9d9577546d066745f1224b5ba11b7e26dfbab967e5d09b00f240defeb0261128.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 821KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 21KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE