Behavioral task
behavioral1
Sample
7880bcf17bec2326bba173e5c56c201276a620f4260e65e847f275d372aab2c9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7880bcf17bec2326bba173e5c56c201276a620f4260e65e847f275d372aab2c9.exe
Resource
win10v2004-20220812-en
General
-
Target
7880bcf17bec2326bba173e5c56c201276a620f4260e65e847f275d372aab2c9
-
Size
181KB
-
MD5
db93e2b8602c3bb35bea6582347ce32d
-
SHA1
6f4902585884cdf5e1b516055c721dbad235fb99
-
SHA256
7880bcf17bec2326bba173e5c56c201276a620f4260e65e847f275d372aab2c9
-
SHA512
3cc88f05ce8c37d31080b5a9e613126267f8c175f80868ed7dd490fa211fd99bf702647705e18ad70fd4aff35a950339d4cf87348bc1c7c706cc59adff6cbaa9
-
SSDEEP
3072:w0gc18fFBFzYs5SwoxWp57ESSamTmM5iGsRsIeoCGfEVR6PyMHzDU8BvB6:w011kFXz58i5LM5QRffERYyME8K
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
7880bcf17bec2326bba173e5c56c201276a620f4260e65e847f275d372aab2c9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 159KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE