Behavioral task
behavioral1
Sample
648b4f216e68356d6210d95d03c8c3ee7e82d4e65771bf10d31af05589ad62c3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
648b4f216e68356d6210d95d03c8c3ee7e82d4e65771bf10d31af05589ad62c3.exe
Resource
win10v2004-20220812-en
General
-
Target
648b4f216e68356d6210d95d03c8c3ee7e82d4e65771bf10d31af05589ad62c3
-
Size
984KB
-
MD5
45026f1980ba117da5f42a3a9aa68e81
-
SHA1
8c40624d8b66d5b6bbca5236300833270c855ca7
-
SHA256
648b4f216e68356d6210d95d03c8c3ee7e82d4e65771bf10d31af05589ad62c3
-
SHA512
2c2fd44fb2b52cf603ccaceffeb59cad35f37851d1be679f644fe8c153b02fc8791bb7ab25d97a3f5a27f6406a8365e5fa4f1c45c5a2e736f574bd240dc58793
-
SSDEEP
12288:xozH1Z3qcYAyGMOyrKv/as3QE2MyqjYd9Z2qwoLUtaimB5O9XMjUHSUS06bdxbT:uBZ39YA+rwgayxZ2rLUjBejSdbdx/A
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
648b4f216e68356d6210d95d03c8c3ee7e82d4e65771bf10d31af05589ad62c3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 38KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 934KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE