Behavioral task
behavioral1
Sample
1f68bc6d36eff0596e15c8c4539efc9009bf415f70afecd6785e854377e5efd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f68bc6d36eff0596e15c8c4539efc9009bf415f70afecd6785e854377e5efd1.exe
Resource
win10v2004-20220812-en
General
-
Target
1f68bc6d36eff0596e15c8c4539efc9009bf415f70afecd6785e854377e5efd1
-
Size
275KB
-
MD5
6ee9b4dcce35d5a2c23cfa30789d7bd0
-
SHA1
e1c6a4675c6cb4db679d6f065b538b003f7f98e9
-
SHA256
1f68bc6d36eff0596e15c8c4539efc9009bf415f70afecd6785e854377e5efd1
-
SHA512
745d7a450c41fb9594a1be22fd867be7eebecd228de54e87402ba2d0217e5d1a6d21ca93d874913ada8a81e457e521ea7e8e125c8ebd0a7677a6d8e768d3fc33
-
SSDEEP
6144:a/XCfqqfQskU3qyZj3lXpIZRW59mUr3NOM:Q7MkwzlXuZRq9pzcM
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
1f68bc6d36eff0596e15c8c4539efc9009bf415f70afecd6785e854377e5efd1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 206KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE