Behavioral task
behavioral1
Sample
ac9cea732c113592fd2ccccad0bebd3103c04fe300fe8f0bfc91218b09f1b45e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac9cea732c113592fd2ccccad0bebd3103c04fe300fe8f0bfc91218b09f1b45e.exe
Resource
win10v2004-20221111-en
General
-
Target
ac9cea732c113592fd2ccccad0bebd3103c04fe300fe8f0bfc91218b09f1b45e
-
Size
19KB
-
MD5
669ad065ee394be934b4bef9f840a7f3
-
SHA1
21675e3deaa9b74d8d2d0cc4b7ada8cdec18f8ba
-
SHA256
ac9cea732c113592fd2ccccad0bebd3103c04fe300fe8f0bfc91218b09f1b45e
-
SHA512
37b0fef1e0bc5b9dfb77609ffe3e23e75b50279216cf2d0b6ab34ee6a11c5c23b483047c19c9d7951985126f2f94c9ac878d4be8e64913b1f04a1f437b81e3d1
-
SSDEEP
384:sy19F7CD0uE4R6hD4HbO/ewswgizxih9ltpUD6ghAxQr6+S9Pfu7n5:syLFW9UD47O/ewdzYtlxXdeV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ac9cea732c113592fd2ccccad0bebd3103c04fe300fe8f0bfc91218b09f1b45e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
-BLTEAM- Size: 14KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE