Behavioral task
behavioral1
Sample
4fc1a0b142a818c9346f6c90e257cc23d4e987ace593ecabbba19f3a372eb66e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4fc1a0b142a818c9346f6c90e257cc23d4e987ace593ecabbba19f3a372eb66e.exe
Resource
win10v2004-20221111-en
General
-
Target
4fc1a0b142a818c9346f6c90e257cc23d4e987ace593ecabbba19f3a372eb66e
-
Size
356KB
-
MD5
35c158d30d80f4307521183a30bbea16
-
SHA1
6a19b2ebc3708bd84f7ddbba9f391e0b70a7dba7
-
SHA256
4fc1a0b142a818c9346f6c90e257cc23d4e987ace593ecabbba19f3a372eb66e
-
SHA512
6467e23be7d46c1c63a767689f48d9cbe561be9d348210d3220a6508cfdd958414b874d1a1a43604159f8628087f8a16ebae407addfa2a926cd7905de198e1c2
-
SSDEEP
6144:r0xpUL38GGbveFpM6p6UNS2CUXUeODcVfxHdLE73WQwzrM3sYpcQJwe:r0zSsGGbmb6OAIv1E7WQwZ0ckw
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
4fc1a0b142a818c9346f6c90e257cc23d4e987ace593ecabbba19f3a372eb66e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 237KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE