Behavioral task
behavioral1
Sample
c09b44c73ca7e4565316bca5a32467e2732929adf0a11e540f8d03cc8ce14562.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c09b44c73ca7e4565316bca5a32467e2732929adf0a11e540f8d03cc8ce14562.exe
Resource
win10v2004-20221111-en
General
-
Target
c09b44c73ca7e4565316bca5a32467e2732929adf0a11e540f8d03cc8ce14562
-
Size
1.8MB
-
MD5
b7688eac7ec33e7b53b6ef6039b6795e
-
SHA1
ecccd2870aa020023db6f0b326925c2af3e5b647
-
SHA256
c09b44c73ca7e4565316bca5a32467e2732929adf0a11e540f8d03cc8ce14562
-
SHA512
abf23aba2dc40f5a8f7ac1d37329115d5a318f9b62f2e0552b91dc2aeea82ad4b884f588f1565ee24ed4a283372926375bf4fe9b140ce7cd11e826fb13ab21e9
-
SSDEEP
24576:7WLkVLhAMtAJhNM03AWKlOgy3xtW9Nke0XGHW+XWsyztvzA9zfue107EHNDXeeM5:okthAiktwXl5Ya0XGlRy5AZf1O0DO5L
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c09b44c73ca7e4565316bca5a32467e2732929adf0a11e540f8d03cc8ce14562.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 221KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.5MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE