Behavioral task
behavioral1
Sample
67f422bae6a8566d2db4146e26e26bcf4707ce86d2d7fc02ac689d67a0a0c0cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
67f422bae6a8566d2db4146e26e26bcf4707ce86d2d7fc02ac689d67a0a0c0cd.exe
Resource
win10v2004-20221111-en
General
-
Target
67f422bae6a8566d2db4146e26e26bcf4707ce86d2d7fc02ac689d67a0a0c0cd
-
Size
301KB
-
MD5
4d40ae8d85d856a5005ea8e31f75a2d5
-
SHA1
2af6e7cffbcb8d2ad7a8417b06079b4d97932b53
-
SHA256
67f422bae6a8566d2db4146e26e26bcf4707ce86d2d7fc02ac689d67a0a0c0cd
-
SHA512
57d43d020c3a0a4ac1fef1271a534ab05eb94d5edcb6ccc06b99f35c2d4432ef1ac8f645cd52ba4e29506d88d6ac4f67023bd1ac2d03816cb3586e57e4dcf630
-
SSDEEP
6144:tt2i7PF+CQpkJUpoutlUDvyPgQMIDllrqW6xSaMnp6dr:tJTF7QTevyPgQ5RIycdr
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
67f422bae6a8566d2db4146e26e26bcf4707ce86d2d7fc02ac689d67a0a0c0cd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 248KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE