Behavioral task
behavioral1
Sample
85682638b12d34947fc128a39d11113ec2a4b3fcfa1d41c26e0db03f299542c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85682638b12d34947fc128a39d11113ec2a4b3fcfa1d41c26e0db03f299542c3.exe
Resource
win10v2004-20220812-en
General
-
Target
85682638b12d34947fc128a39d11113ec2a4b3fcfa1d41c26e0db03f299542c3
-
Size
25KB
-
MD5
6d34bc1b1f9516c0d2e673e4a7fc9930
-
SHA1
20c81fe70ee6d7941036f681c360cf585656bbaa
-
SHA256
85682638b12d34947fc128a39d11113ec2a4b3fcfa1d41c26e0db03f299542c3
-
SHA512
49ad0fc84d6bef1fc1e2301c03a885e98e620061808b8f41e5d1d9fe4460b9a93d98a1e77d6c26eb3a66776c6db1c29bf2428725d3bbe84613d5ee69a7a14c0b
-
SSDEEP
384:kN+s8KpaFebAudH9ynTUPULiEMhal1UiMrKsPGvuAxPr6+S9Pfu7n5FW/mFeklzR:O+s8ekudHMnTdaQ+DOv5xedeVFW4lzcY
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
85682638b12d34947fc128a39d11113ec2a4b3fcfa1d41c26e0db03f299542c3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE