Behavioral task
behavioral1
Sample
ac32791c1c273112f4e80a9165220b2242a17c07a6c735c243c34e536401e38f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac32791c1c273112f4e80a9165220b2242a17c07a6c735c243c34e536401e38f.exe
Resource
win10v2004-20221111-en
General
-
Target
ac32791c1c273112f4e80a9165220b2242a17c07a6c735c243c34e536401e38f
-
Size
89KB
-
MD5
e07c5667bab19debcd494c9e37301553
-
SHA1
446dc2bbbf5a4eb4bc3525e7a4dd7560941d7dd7
-
SHA256
ac32791c1c273112f4e80a9165220b2242a17c07a6c735c243c34e536401e38f
-
SHA512
7714fc5766df9c56666235040f77c469f307ae42f02be86f65b363211e4425a9fbc86349261c108ffd697f1d5c70edb413c1712c12af9a2329a912eb6db01883
-
SSDEEP
1536:r/FDwOn+JrWMgg42NRHKvQPZtQq4kYhTw0yIogURCotEuXiLnrxrasWcnzETkZy6:7V+scRHyQPLQq4JhTw0NEhSL13WLaX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ac32791c1c273112f4e80a9165220b2242a17c07a6c735c243c34e536401e38f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 75KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE