Behavioral task
behavioral1
Sample
ffd62482d181966e1eaf049c3dfdf6c9ff1f61a5becb645544d1afef6840c987.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffd62482d181966e1eaf049c3dfdf6c9ff1f61a5becb645544d1afef6840c987.exe
Resource
win10v2004-20220901-en
General
-
Target
ffd62482d181966e1eaf049c3dfdf6c9ff1f61a5becb645544d1afef6840c987
-
Size
57KB
-
MD5
425f1ac1789fef04555d035f8fd2b3c0
-
SHA1
875697a17b205e14b7fc6eae2146310c7551df51
-
SHA256
ffd62482d181966e1eaf049c3dfdf6c9ff1f61a5becb645544d1afef6840c987
-
SHA512
2da18978df57bc4a5712d6a967e8875c9d25eea92c7e43f07065af162e84bec98027cdef78cac76d3d8e12a6872f8751c59c4cffc5817578275c1a9aaa531874
-
SSDEEP
1536:r2X3j211Ep9GfKIPL2HJviMC7ovWwacC:C4cihLkJaMOouwan
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ffd62482d181966e1eaf049c3dfdf6c9ff1f61a5becb645544d1afef6840c987.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
!EPack Size: 42KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE