Behavioral task
behavioral1
Sample
8a9ca742751f48a10252be97c428b4f40843b2b6ae342e31696e6998613d63b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a9ca742751f48a10252be97c428b4f40843b2b6ae342e31696e6998613d63b3.exe
Resource
win10v2004-20220812-en
General
-
Target
8a9ca742751f48a10252be97c428b4f40843b2b6ae342e31696e6998613d63b3
-
Size
46KB
-
MD5
6f5ef1534a4815503eb1adf7c65aa3a0
-
SHA1
c168ab1c45e4e9447198c27ff2fd306003559e94
-
SHA256
8a9ca742751f48a10252be97c428b4f40843b2b6ae342e31696e6998613d63b3
-
SHA512
abc953469a4bb216784af73a2ad9f46835b41503138d0c76baf2b74778ea345b86e075c1df89686ade15282466827b8994fd2913daa1b16cd374e985fa7dc4c1
-
SSDEEP
768:yh+AeX9RGzw6Xkn52WD24WIGoxebPr4/dHSW1qwHjg6pq4yV5SHaLiqjmy/p:y8956X42WDfWIec/dH9MAlyXIafjm2p
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
8a9ca742751f48a10252be97c428b4f40843b2b6ae342e31696e6998613d63b3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE