Behavioral task
behavioral1
Sample
9cdc59279a2b90968a8f4cf2de4bb90bddcf7f4fadf5b2f611ffc752f968f271.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9cdc59279a2b90968a8f4cf2de4bb90bddcf7f4fadf5b2f611ffc752f968f271.exe
Resource
win10v2004-20220812-en
General
-
Target
9cdc59279a2b90968a8f4cf2de4bb90bddcf7f4fadf5b2f611ffc752f968f271
-
Size
61KB
-
MD5
9255ed4397714f48f312f9f1dfd0b980
-
SHA1
96fe6de78880286660a4ee60ec4f9d0943768ff7
-
SHA256
9cdc59279a2b90968a8f4cf2de4bb90bddcf7f4fadf5b2f611ffc752f968f271
-
SHA512
0957be3967272aa2b1f966d341a1c72d766d47d2858178a2950e53606b9e9f54eb4a4afb3e5479e26c17aaffc89bc4b8d1489dc8200265c63d4377ec179fbc83
-
SSDEEP
1536:ENjx1Azp2YSdBZ7ckuiIEe7MWyOWJJLT:UG2rHWHEe727JJL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9cdc59279a2b90968a8f4cf2de4bb90bddcf7f4fadf5b2f611ffc752f968f271.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE