Behavioral task
behavioral1
Sample
9a1b70c31bab6feffeb2c03e8fbc2165744a493e757c096937f4324e1ee9004c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a1b70c31bab6feffeb2c03e8fbc2165744a493e757c096937f4324e1ee9004c.exe
Resource
win10v2004-20220812-en
General
-
Target
9a1b70c31bab6feffeb2c03e8fbc2165744a493e757c096937f4324e1ee9004c
-
Size
373KB
-
MD5
4322f6f275b36f783fde1fdaebc88d5c
-
SHA1
a9811c8d611bf43882bcca90fa0db85bc8794d5e
-
SHA256
9a1b70c31bab6feffeb2c03e8fbc2165744a493e757c096937f4324e1ee9004c
-
SHA512
c727b86557a480dd4f291ed2a80e6cfcfeecee38189b017a16455eca2fc6579a99e1f7d0039516dae63a2718da63e4e9638f4d1b8988de2bf0e31a85d0fafd78
-
SSDEEP
6144:L+4K7w6r6j1BN7Tca9Xy68qmc9DUvCR3A6PQurl0YoTyaqXmjazTN1Kj40L8e2l:nK7vy3pThmS3H/l0YoGNXmezTNIlL8T
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9a1b70c31bab6feffeb2c03e8fbc2165744a493e757c096937f4324e1ee9004c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 246KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NoRG Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE