Behavioral task
behavioral1
Sample
969ea03e94ff4bce68cc5a838882534f5f3b33d8ecd1d364d7b155cf8144821c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
969ea03e94ff4bce68cc5a838882534f5f3b33d8ecd1d364d7b155cf8144821c.exe
Resource
win10v2004-20221111-en
General
-
Target
969ea03e94ff4bce68cc5a838882534f5f3b33d8ecd1d364d7b155cf8144821c
-
Size
153KB
-
MD5
cee8bb9f9b881c628b6b5adbbf17b272
-
SHA1
8728210056e4877f250730c3276721a158ad4fff
-
SHA256
969ea03e94ff4bce68cc5a838882534f5f3b33d8ecd1d364d7b155cf8144821c
-
SHA512
11a045997f39d8e3e13e2d3c92cd63cb68a3537ece662a67351f662339fa95e825eb7073b55f8329eb7eedd8b4211cadec25609d1c0345b5b43bb18aef44931c
-
SSDEEP
3072:lBn2v0N3Xw0Gg9UX6HzUY0aD9T8xE717JS7/5:v28N32
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
969ea03e94ff4bce68cc5a838882534f5f3b33d8ecd1d364d7b155cf8144821c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE