Behavioral task
behavioral1
Sample
f17ab778e9ead94b3fd26cbc264e34e1301f12131c824e1c94cbdb3440764478.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f17ab778e9ead94b3fd26cbc264e34e1301f12131c824e1c94cbdb3440764478.exe
Resource
win10v2004-20220812-en
General
-
Target
f17ab778e9ead94b3fd26cbc264e34e1301f12131c824e1c94cbdb3440764478
-
Size
29KB
-
MD5
19fc4c9df71af5d77e82934572843a40
-
SHA1
ceb5bd4516b9095c05af9a2584f480f33061c42e
-
SHA256
f17ab778e9ead94b3fd26cbc264e34e1301f12131c824e1c94cbdb3440764478
-
SHA512
c45687e6b7f9807dab3045235fd7ab2f59fd2644cc36382f89464069f916933492c55150955e848ebb751d6e920eb32e1e322b85574dc08eee0249e325821d43
-
SSDEEP
768:kBnTxTGr5tIng0CVUkQmMuB5pfB2JZiWmGHx5bPr:kLyFtIgB2l2J2JZiWmm
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f17ab778e9ead94b3fd26cbc264e34e1301f12131c824e1c94cbdb3440764478.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE