Behavioral task
behavioral1
Sample
2fa5a7084dc6adc32a5b214a24681d4c29d146647c6d12a729fa04e36f4c4dd9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2fa5a7084dc6adc32a5b214a24681d4c29d146647c6d12a729fa04e36f4c4dd9.exe
Resource
win10v2004-20220812-en
General
-
Target
2fa5a7084dc6adc32a5b214a24681d4c29d146647c6d12a729fa04e36f4c4dd9
-
Size
240KB
-
MD5
0f8c53f6663516479a44793f71aeffd5
-
SHA1
9c020e195cfe5209cd8ceb117d93e7558e7df33e
-
SHA256
2fa5a7084dc6adc32a5b214a24681d4c29d146647c6d12a729fa04e36f4c4dd9
-
SHA512
cf1e796d182ee867931d099bc145313637544d308a6c3def40b8c54d40cdc7e15755e23d3005b7f7eb77855bc32aa813ae2169d2ce3317ad5e191427ddc5b1c2
-
SSDEEP
3072:TpZqGaS4Gr+IbLlxx/BOMYSf7KJSEydQ2WHHFVdcfipli:TpZqPS4s+I9TJ/fuJsKHvd
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
2fa5a7084dc6adc32a5b214a24681d4c29d146647c6d12a729fa04e36f4c4dd9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE