Behavioral task
behavioral1
Sample
d5e4cc2b9385a98a8168bc607c1bc64e53ccfa71b9c7e94b940cb83f7a20d981.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d5e4cc2b9385a98a8168bc607c1bc64e53ccfa71b9c7e94b940cb83f7a20d981.exe
Resource
win10v2004-20220901-en
General
-
Target
d5e4cc2b9385a98a8168bc607c1bc64e53ccfa71b9c7e94b940cb83f7a20d981
-
Size
21KB
-
MD5
ab08623461861158f4ca1d04dd6239c9
-
SHA1
10a79e2274cb8e2f9b9fae042c9f45103fb6f787
-
SHA256
d5e4cc2b9385a98a8168bc607c1bc64e53ccfa71b9c7e94b940cb83f7a20d981
-
SHA512
eb82a736e9e045fb4f7438881d4f6f8d510763d2e00a371e9c8a3bf5550e27af9488b48b4be379859f4b4300945d4ef91a2ef7d35d4d30de17c4c94ba834938e
-
SSDEEP
384:JVEi6d/zY7ez9sZQuUd5hCnMBDAebfLMYI1G1AxLr6+S9Pfu7n5v:JVEi6d7YTZQLdUMBDAebzMYUGuxydeVv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
d5e4cc2b9385a98a8168bc607c1bc64e53ccfa71b9c7e94b940cb83f7a20d981.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE