Behavioral task
behavioral1
Sample
a1bff8d7f0494b4007a9fa121e737432ef8ed9d5c578be054280eeeabefebbb5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1bff8d7f0494b4007a9fa121e737432ef8ed9d5c578be054280eeeabefebbb5.exe
Resource
win10v2004-20220812-en
General
-
Target
a1bff8d7f0494b4007a9fa121e737432ef8ed9d5c578be054280eeeabefebbb5
-
Size
977KB
-
MD5
4dba9056f247f4519bf7ae1cd992f1b4
-
SHA1
66d22bf86e4196afdc8ce505fef6b9fe5ea10396
-
SHA256
a1bff8d7f0494b4007a9fa121e737432ef8ed9d5c578be054280eeeabefebbb5
-
SHA512
02fd09ca08dbe02f9b7db78da8e56fa9f2be699fd014bf59cd528c8db0bcafbdb232d181addcfd291a61489391eb3a63f5d06aa48990b118060dd818a66ad7cb
-
SSDEEP
24576:s22ku6xXPZ2gWoRkvjOA01k4RKeLvh1Oz7TpEJH7zDRGGU:s2m6RhIKkvjOA0K4R7Liz7TpEhPRGGU
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a1bff8d7f0494b4007a9fa121e737432ef8ed9d5c578be054280eeeabefebbb5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 571KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 267KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE