Behavioral task
behavioral1
Sample
c4bcacf5980e910782907ec50ce52724467ece353d93b6e41284fd8bbfe26b32.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4bcacf5980e910782907ec50ce52724467ece353d93b6e41284fd8bbfe26b32.exe
Resource
win10v2004-20220812-en
General
-
Target
c4bcacf5980e910782907ec50ce52724467ece353d93b6e41284fd8bbfe26b32
-
Size
534KB
-
MD5
b472a6147ef312d7ab99d77292c8531b
-
SHA1
b7aa3fdf632a453771d1b38762750e1d3f2bd063
-
SHA256
c4bcacf5980e910782907ec50ce52724467ece353d93b6e41284fd8bbfe26b32
-
SHA512
4495fba79f400efdccf11e7e26d41cbada3c96cd679f7eaf4da8ee07097ed45f12dc1dd6e7d8d2cc97d106f6592e32fe84f624ea9e810a267b73bd9d0602b377
-
SSDEEP
12288:0ouDIJeLYfPGYYn2WGru7MH3m9jrpnquSmEcvI6kQgWf8:7usHPBG6ru7MH29jrpnemhvEW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c4bcacf5980e910782907ec50ce52724467ece353d93b6e41284fd8bbfe26b32.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 318KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 33KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��1��ue Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE