Behavioral task
behavioral1
Sample
6a4fd3fcf6615d48a0a988b3e52e8eb15be46c3f2b0d2bb72adf5ccf5a85da35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a4fd3fcf6615d48a0a988b3e52e8eb15be46c3f2b0d2bb72adf5ccf5a85da35.exe
Resource
win10v2004-20220901-en
General
-
Target
6a4fd3fcf6615d48a0a988b3e52e8eb15be46c3f2b0d2bb72adf5ccf5a85da35
-
Size
70KB
-
MD5
310610c8883190c444ebdb3a3e7fcc8a
-
SHA1
683d719ea3846ef1dba2540805640b37ba3e0b83
-
SHA256
6a4fd3fcf6615d48a0a988b3e52e8eb15be46c3f2b0d2bb72adf5ccf5a85da35
-
SHA512
be60742714e0613fda0a2314e1e3e9987e4a95541e77492ffcd001121950684bd1fcda753308a44c089f6635524e928d7ea885b766ce1e81056f1c27f49286ee
-
SSDEEP
1536:bNUTKAK5b+m6OAlzxve5RSKrj43gYquXUW69mb:bafeb+mzADwRuQYqfcb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
6a4fd3fcf6615d48a0a988b3e52e8eb15be46c3f2b0d2bb72adf5ccf5a85da35.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bprlywt Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE