Behavioral task
behavioral1
Sample
98e23ca862fde7639a529c02e911479bbc1d324155609130067b76d5ed62eee5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
98e23ca862fde7639a529c02e911479bbc1d324155609130067b76d5ed62eee5.exe
Resource
win10v2004-20221111-en
General
-
Target
98e23ca862fde7639a529c02e911479bbc1d324155609130067b76d5ed62eee5
-
Size
184KB
-
MD5
ccc9549ac8c3c6870c69790621b38bad
-
SHA1
5b1d70de25cdb1503087cafa6c84c3d557b33dc0
-
SHA256
98e23ca862fde7639a529c02e911479bbc1d324155609130067b76d5ed62eee5
-
SHA512
f06aeb7ad7c02752bb9c072bad0adae9c80e5671674cba4eda6e2b943938e26424c91e11ba79a42f4e817e71e3c06406ceb1f2b06568af9b68a9243deef652d7
-
SSDEEP
3072:wOc8+OXbkB3prw8KbjQ0Jpxw2QdM9QutwVl17gyhInInt72WenaRuuAK3lC:wOHNXoZZOjQ03x3l2EuLnImt72WeaEi
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
98e23ca862fde7639a529c02e911479bbc1d324155609130067b76d5ed62eee5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 115KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 60KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE