Behavioral task
behavioral1
Sample
c1a6dadd1f5afdd2d1fce96a8787f7f4e096529a5d036448bea21553c4437cf4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1a6dadd1f5afdd2d1fce96a8787f7f4e096529a5d036448bea21553c4437cf4.exe
Resource
win10v2004-20220812-en
General
-
Target
c1a6dadd1f5afdd2d1fce96a8787f7f4e096529a5d036448bea21553c4437cf4
-
Size
94KB
-
MD5
a0bc42935bfc8585c80101240ee01170
-
SHA1
c41c5d2ec4990979486cf59240666f365549e0e9
-
SHA256
c1a6dadd1f5afdd2d1fce96a8787f7f4e096529a5d036448bea21553c4437cf4
-
SHA512
4fd47bd705bf139a266a9e7c0c43603211529a73d2718d92f24f5e1ac01715fc713d98fc818f643f81b999dbb7ce77cb1f3afefe313a540e822455cadebb6e1f
-
SSDEEP
1536:zaYQxWlDtiw/L+NCC6nQXqw4QO/2jIy3v5BW4ntGcKe1R+1ERLTTHqt:mYFkIC6nQXqw4L2R/WCtFU10S
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c1a6dadd1f5afdd2d1fce96a8787f7f4e096529a5d036448bea21553c4437cf4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE