Behavioral task
behavioral1
Sample
fcffb77511eb9fc5cf3cce497901fff80ddcb637cd05ab5d0b47938c5914bdcd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fcffb77511eb9fc5cf3cce497901fff80ddcb637cd05ab5d0b47938c5914bdcd.exe
Resource
win10v2004-20220901-en
General
-
Target
fcffb77511eb9fc5cf3cce497901fff80ddcb637cd05ab5d0b47938c5914bdcd
-
Size
141KB
-
MD5
63832909c720944706cbe6816cb0b7e5
-
SHA1
1bb3d9693b22deab53ff40284afa54027c0601a4
-
SHA256
fcffb77511eb9fc5cf3cce497901fff80ddcb637cd05ab5d0b47938c5914bdcd
-
SHA512
689e92ad829e41d50fca72be8d45975b7428ef0583fcffdacbb0b655a332f33a2e42f0a3b0e20bae82d549ff86f8ecd4bb45550fd90cb631f8d6f20d1ee1463e
-
SSDEEP
3072:eaZ4ZZSp5w9LjI3OP7eyDJ82bbjRJhkBrDMTr2HucZiRToaqCL:ruZSp5w1COP7NnvhkBrATKHuc8RToaqA
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fcffb77511eb9fc5cf3cce497901fff80ddcb637cd05ab5d0b47938c5914bdcd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Cjbf Size: 4080.0MB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Dacd Size: 4080.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyk Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ivcdj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rjt Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rzcdh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrtgd Size: 63KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rbvd Size: 127KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yky Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aqfvd Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA