Behavioral task
behavioral1
Sample
6ac30cada0558c823a4e0865e6c5451b2c5781782f2b84f946b15ea256229f0b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ac30cada0558c823a4e0865e6c5451b2c5781782f2b84f946b15ea256229f0b.exe
Resource
win10v2004-20221111-en
General
-
Target
6ac30cada0558c823a4e0865e6c5451b2c5781782f2b84f946b15ea256229f0b
-
Size
223KB
-
MD5
a81ce628248498daf608f6ba090c597f
-
SHA1
d214e95f4ac18b94b55b39353b45cbcd0da8a905
-
SHA256
6ac30cada0558c823a4e0865e6c5451b2c5781782f2b84f946b15ea256229f0b
-
SHA512
e03f64d1836903bb679b5634cd5a970dac68b9efd46eb37e9af8fac3d11c4eb9538d6a765a656f86b7a8c556976fc91f366027db4547f66521b43cdeb6041278
-
SSDEEP
6144:sNWHwCD9AiPC412x1YqjiNQOP5AHq5GDWZgT+E:heI2xqqGCORP54JS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
6ac30cada0558c823a4e0865e6c5451b2c5781782f2b84f946b15ea256229f0b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 192KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE