Behavioral task
behavioral1
Sample
c681ba32f4c7a48750207525d537184223ce13f057bc6689e4923e1ae9e7f8c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c681ba32f4c7a48750207525d537184223ce13f057bc6689e4923e1ae9e7f8c6.exe
Resource
win10v2004-20220812-en
General
-
Target
c681ba32f4c7a48750207525d537184223ce13f057bc6689e4923e1ae9e7f8c6
-
Size
166KB
-
MD5
6fac2e89ce1dc07df675f0e0d26b47dd
-
SHA1
c85d3c74d8e55c30e44bab66da45199d54f3635f
-
SHA256
c681ba32f4c7a48750207525d537184223ce13f057bc6689e4923e1ae9e7f8c6
-
SHA512
ab2d555920071c607fcad661060ac2aa3d7011d3b8247f79a9e5bad56d6cfcacfef7ace8f78ae12622b0b03bc471a2ff5f64019d09d32ffc6fc991bae0e0f94a
-
SSDEEP
768:1Ru1M1I5fUEECJ9jdqIH1IFdhxGha56vHh6:rn6Vd9hB2FdqXvHh6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c681ba32f4c7a48750207525d537184223ce13f057bc6689e4923e1ae9e7f8c6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r3ad Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE