Behavioral task
behavioral1
Sample
9f967f5866249fb7c32631b33268a0435bbec8c9dda2ea3ac233c6225c287b6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f967f5866249fb7c32631b33268a0435bbec8c9dda2ea3ac233c6225c287b6f.exe
Resource
win10v2004-20220812-en
General
-
Target
9f967f5866249fb7c32631b33268a0435bbec8c9dda2ea3ac233c6225c287b6f
-
Size
31KB
-
MD5
13f0ef6229923fe529a5d2d3f56a4ee0
-
SHA1
b7fa98eb67567fd59a48b3c895a3493e79b997f2
-
SHA256
9f967f5866249fb7c32631b33268a0435bbec8c9dda2ea3ac233c6225c287b6f
-
SHA512
c1733e9494ce3c06947e5b013aa8b3a03a6c1110a8da57227566c52ae16ded828cd4c16827292f7d5c780ed54a754f7a6805e1b0396ede06a09c58524cdf8cc2
-
SSDEEP
768:dvTRQTYbtcXlv1iNVWY2TATzMRy6eDsopnTSlWFGtxZbPr:d7R6Ybtct1iNV0kHCAwFWFs
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9f967f5866249fb7c32631b33268a0435bbec8c9dda2ea3ac233c6225c287b6f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE