Behavioral task
behavioral1
Sample
675379a1b5acfee9d498832e86d6e9588789e1cdf6f9054d49c5dc5c865fe47b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
675379a1b5acfee9d498832e86d6e9588789e1cdf6f9054d49c5dc5c865fe47b.exe
Resource
win10v2004-20220812-en
General
-
Target
675379a1b5acfee9d498832e86d6e9588789e1cdf6f9054d49c5dc5c865fe47b
-
Size
557KB
-
MD5
108bc6c7253c89824c5f5587b61ca900
-
SHA1
b666f8c43c9f53052b17c5a3a3a8bb95e8f5d74e
-
SHA256
675379a1b5acfee9d498832e86d6e9588789e1cdf6f9054d49c5dc5c865fe47b
-
SHA512
9b78abf57a192e78d7593d5fbf75cbabbdc2f908fadb99237ef3ef95b469772c7dfd54974b4b4b371f2a8a94ee65e6cda1e9a652d45012b7eb86d6baff05e7fd
-
SSDEEP
12288:KIfPzF/hWFCo2MkfXEM1+uSgAMme41c2obY7AyKvDiAKC5Wsau:KIzF/wZ28MkRgjmeqoc8fpj
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
675379a1b5acfee9d498832e86d6e9588789e1cdf6f9054d49c5dc5c865fe47b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 244KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE