Behavioral task
behavioral1
Sample
9534be0332bd018faa76a19625d3ea0b130998fc3b8f0511e64642372c773aa5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9534be0332bd018faa76a19625d3ea0b130998fc3b8f0511e64642372c773aa5.exe
Resource
win10v2004-20220901-en
General
-
Target
9534be0332bd018faa76a19625d3ea0b130998fc3b8f0511e64642372c773aa5
-
Size
1013KB
-
MD5
c567476af149bd03c1192703f98c641e
-
SHA1
7d9b877e665c17647733c695c8f24a3e98446183
-
SHA256
9534be0332bd018faa76a19625d3ea0b130998fc3b8f0511e64642372c773aa5
-
SHA512
39cb6fe7641f8a13ffe4664d3d0d985df286f7b66ce9a8d6a68511c10a03d21d4ee2a71300ef74463ccad5a708384bae279351a4b50d0ad16dc9386ab49bcdcc
-
SSDEEP
24576:6SXiNuWUXDLs4GgyS67u9Y5YPfh9vYI8iYLzzEAX:6IabS9pGuC5UvL8iYLhX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9534be0332bd018faa76a19625d3ea0b130998fc3b8f0511e64642372c773aa5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
0 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 41KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 44KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE