Behavioral task
behavioral1
Sample
6efc896a3c5d8a6944651f2db88f45494444b27a3f3c1257eabf24c5875a8012.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6efc896a3c5d8a6944651f2db88f45494444b27a3f3c1257eabf24c5875a8012.exe
Resource
win10v2004-20221111-en
General
-
Target
6efc896a3c5d8a6944651f2db88f45494444b27a3f3c1257eabf24c5875a8012
-
Size
561KB
-
MD5
80685ed05db471f265c24b40accd79c0
-
SHA1
70f33f91e6692d24ab5ead42ccb767f65f4e142b
-
SHA256
6efc896a3c5d8a6944651f2db88f45494444b27a3f3c1257eabf24c5875a8012
-
SHA512
49dec7eae15e8b227fd5eaa76e6dce65fd41b1e5bb7a8b74f9243a24026f55bc8ee61eee4b8be78381464f10ce3ee86eaa629d202ee1efd12c302b5c7bcbd6f0
-
SSDEEP
12288:YVkJssDMmt9HgNpwXNxz8utsc7QEL3HUT922Go6O7nTsS:w6DBBouHMU3Hg22L6qnJ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
6efc896a3c5d8a6944651f2db88f45494444b27a3f3c1257eabf24c5875a8012.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 560KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE