Behavioral task
behavioral1
Sample
da9891077bbcb9a1ceb6f0454196cceb1176e2b02375fd2f08290f5ba1df4655.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
da9891077bbcb9a1ceb6f0454196cceb1176e2b02375fd2f08290f5ba1df4655.exe
Resource
win10v2004-20221111-en
General
-
Target
da9891077bbcb9a1ceb6f0454196cceb1176e2b02375fd2f08290f5ba1df4655
-
Size
42KB
-
MD5
a74fe7c347e88d87ab704086bc6cba7e
-
SHA1
555cd82d2d7c2852c495cea5107fe3c363724783
-
SHA256
da9891077bbcb9a1ceb6f0454196cceb1176e2b02375fd2f08290f5ba1df4655
-
SHA512
9740ec82128b0002e0a6d4439f7d41e671dd934f501bf09a12c6ed55618b815364ad17751084ec656c528743e8615af85021c859440eff35205a36092f75554c
-
SSDEEP
768:gyz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888q:hzOCay4wV339rPjzbpLwRJ9pSdoIT
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
da9891077bbcb9a1ceb6f0454196cceb1176e2b02375fd2f08290f5ba1df4655.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE