Behavioral task
behavioral1
Sample
2b6ffa584ed53bd640b3099baff832768d2963a6d22836da5f951108fc95f25b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b6ffa584ed53bd640b3099baff832768d2963a6d22836da5f951108fc95f25b.exe
Resource
win10v2004-20220812-en
General
-
Target
2b6ffa584ed53bd640b3099baff832768d2963a6d22836da5f951108fc95f25b
-
Size
138KB
-
MD5
5fb8cd3bc7a4bc0cb3c17b0a9e5f18ae
-
SHA1
7279ade764a1c69b0764732c5c162b0851d6e47a
-
SHA256
2b6ffa584ed53bd640b3099baff832768d2963a6d22836da5f951108fc95f25b
-
SHA512
41c82a80a21fe827312ea4d947d369e2f57de01211120bf6970ddc3833c58bc944b780ce82ca184397e0305d18ac6b22edf29804aea497b0bb6746a8167030e4
-
SSDEEP
3072:h75febnwipCZQNCzTkABgWQ+L+mCIgVo6xd1myn4A9D3u:J5fekUCeCMAZQTmCIYxGy4A9
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
2b6ffa584ed53bd640b3099baff832768d2963a6d22836da5f951108fc95f25b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE