Behavioral task
behavioral1
Sample
b497f5353ba3322cde7677107045fd28ca2b65623492368d950fb89dfec97b42.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b497f5353ba3322cde7677107045fd28ca2b65623492368d950fb89dfec97b42.exe
Resource
win10v2004-20220812-en
General
-
Target
b497f5353ba3322cde7677107045fd28ca2b65623492368d950fb89dfec97b42
-
Size
196KB
-
MD5
0967eaaa16d333cb580c6d97ac4be4fd
-
SHA1
4dad4dc564207ad2225e98a014f81760e0021a9c
-
SHA256
b497f5353ba3322cde7677107045fd28ca2b65623492368d950fb89dfec97b42
-
SHA512
21ad082c06902e36cded6dfe320062728189857484e2363da06bf2dcd76821d45637c9e5d2e9d83080cfe3bad98d9c9da1e7fe514fb7b7553e77d99d7489aa65
-
SSDEEP
3072:86jI9XJy7rEnj3WCW2EW5nBAw87mZ4wilO/A8IdEJZublonARKukr8kTF9TaqDIJ:fUZy/w87mZ4wMCIdEbwl2dukIONaYy
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b497f5353ba3322cde7677107045fd28ca2b65623492368d950fb89dfec97b42.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE