Behavioral task
behavioral1
Sample
b8f5f62b050eddd4338d89c0cb3a09b907ade776ca4fdb7797ce76795f3792de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b8f5f62b050eddd4338d89c0cb3a09b907ade776ca4fdb7797ce76795f3792de.exe
Resource
win10v2004-20221111-en
General
-
Target
b8f5f62b050eddd4338d89c0cb3a09b907ade776ca4fdb7797ce76795f3792de
-
Size
5.2MB
-
MD5
6b0658a32186f340e069578f62a8a785
-
SHA1
0eb1edaf3c85902ad7e4a43e565d38a5a8696269
-
SHA256
b8f5f62b050eddd4338d89c0cb3a09b907ade776ca4fdb7797ce76795f3792de
-
SHA512
3942e8cd88f1da8e57cb5f001a6006f54b09482b102d3ba4bd4321003630dd316a4f50da0b1ad632f442705e99160058d1b09a7e1d901da6ea60ff9b96485154
-
SSDEEP
98304:/EH3TA2lcxCP9+T4LgbIkKQjOF1GXr4qprlcH/V90dpEiNH6tDIEAq1W+5VrP:sXTA7CP9+T4L+IkKwOHGXBprl8/VqE8m
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b8f5f62b050eddd4338d89c0cb3a09b907ade776ca4fdb7797ce76795f3792de.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 320KB - Virtual size: 337KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE