Behavioral task
behavioral1
Sample
f20a8c8e597608dda2b2efe2acd61e013af3df60d63e41d01f6b84148e54c998.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f20a8c8e597608dda2b2efe2acd61e013af3df60d63e41d01f6b84148e54c998.exe
Resource
win10v2004-20220901-en
General
-
Target
f20a8c8e597608dda2b2efe2acd61e013af3df60d63e41d01f6b84148e54c998
-
Size
426KB
-
MD5
fbabd4d26172f81574eb891f9642254a
-
SHA1
bc98ca97f20e42103e5c4dce6fe40c4e14c443bd
-
SHA256
f20a8c8e597608dda2b2efe2acd61e013af3df60d63e41d01f6b84148e54c998
-
SHA512
d1d9c06e2e2df9d82817850e8ecaee4b929e0c84ad93a8d1fede481923e673ea9f56f49bc3335e280c740c6052843f503a1dd48ec37335d824bbdb2c98a269ed
-
SSDEEP
12288:lfWQbFS6ScND5t25QL+1CPiFQFCvSLpv0G:lfLhS6lvt2eLKCKFXIm
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f20a8c8e597608dda2b2efe2acd61e013af3df60d63e41d01f6b84148e54c998.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 420KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE