Behavioral task
behavioral1
Sample
9c21d2074e743f893b3a3868ae829797e7b13a236715cf5006c9ef667e0f9f14.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9c21d2074e743f893b3a3868ae829797e7b13a236715cf5006c9ef667e0f9f14.exe
Resource
win10v2004-20221111-en
General
-
Target
9c21d2074e743f893b3a3868ae829797e7b13a236715cf5006c9ef667e0f9f14
-
Size
74KB
-
MD5
a56da2f41400315a85a3977e9d4f5254
-
SHA1
721818863deebba9b9d3cf1544d5d3df68d6e250
-
SHA256
9c21d2074e743f893b3a3868ae829797e7b13a236715cf5006c9ef667e0f9f14
-
SHA512
7ee81b532d62a9cd666e2215489bcbafa703c98ea6f1392c0f67583c5dd80593669bff0059b5600c21f91e5956dc5cb04c7cdcc4bcb2c05b29127ffad375e923
-
SSDEEP
1536:8u6SGeeTlhITDebuBr/Nnzc1WHR+2+cxnBOr7Q7miQ4h5Cpsv0JfYPTAjo:8u8ekmHebunnzRHX+c1BwQqIL8Jq3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9c21d2074e743f893b3a3868ae829797e7b13a236715cf5006c9ef667e0f9f14.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE