Behavioral task
behavioral1
Sample
8a47a42c468e951b7c4d3fa16de46a59e8a30de2fd299350f5fe4c97b6eed668.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8a47a42c468e951b7c4d3fa16de46a59e8a30de2fd299350f5fe4c97b6eed668.exe
Resource
win10v2004-20220812-en
General
-
Target
8a47a42c468e951b7c4d3fa16de46a59e8a30de2fd299350f5fe4c97b6eed668
-
Size
164KB
-
MD5
0e2a4281ef4e58e55430589ab8eb5dda
-
SHA1
b766fb86f28eca598ec7c2cfd4080eaa8f4d0c72
-
SHA256
8a47a42c468e951b7c4d3fa16de46a59e8a30de2fd299350f5fe4c97b6eed668
-
SHA512
1541d08a808cb054796d2507cc07606a1c4c06b207676dde53269d4b2fceeab28313ef717fe085e0ddc765c3c149e5cfb21035745e0a0b4fc74d7e10b2307f35
-
SSDEEP
3072:fiOFQ24mzlN2UJdCx+Nm8wTDeSLGX6qZoCgroNZDPbrSAF0fJ5g:fiOFQ24UNDJdCwm4SqqL4DPyAFM5g
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
8a47a42c468e951b7c4d3fa16de46a59e8a30de2fd299350f5fe4c97b6eed668.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 124KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE