Behavioral task
behavioral1
Sample
944550c9638504c9d6afe57abed3c097e52f82284e818af6caac9e2bc8de4a04.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
944550c9638504c9d6afe57abed3c097e52f82284e818af6caac9e2bc8de4a04.exe
Resource
win10v2004-20220901-en
General
-
Target
944550c9638504c9d6afe57abed3c097e52f82284e818af6caac9e2bc8de4a04
-
Size
516KB
-
MD5
18b1debd90bab406d45d7a53daf0f3de
-
SHA1
cac51fe634ade8e94b231aa645fd6ffb5229e7c0
-
SHA256
944550c9638504c9d6afe57abed3c097e52f82284e818af6caac9e2bc8de4a04
-
SHA512
9cdb1a87f739b2ccc8939f21a2142788924799361ef1c632527fe6c831bb6a6d4be8666aa7f0ca568510bccacdce7cffee598affbc6baa8f0d83d56041fde1d8
-
SSDEEP
12288:z5fOF0RT8jbq0bULO2s/QVElQkfjuUUad5sPHBxh5wxdXv:80Rgn4LDyj7d5k5wxp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
944550c9638504c9d6afe57abed3c097e52f82284e818af6caac9e2bc8de4a04.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE