Behavioral task
behavioral1
Sample
a0c5c6007d83ed2073be58f863f71c946304bbf920653cfeb6a866d0f1561dad.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0c5c6007d83ed2073be58f863f71c946304bbf920653cfeb6a866d0f1561dad.exe
Resource
win10v2004-20220812-en
General
-
Target
a0c5c6007d83ed2073be58f863f71c946304bbf920653cfeb6a866d0f1561dad
-
Size
83KB
-
MD5
49eb758ba4c6a1824d7eda09c1a933cd
-
SHA1
e7fc66481b4e25bd3b4eaad1e5b7c09b8c370f21
-
SHA256
a0c5c6007d83ed2073be58f863f71c946304bbf920653cfeb6a866d0f1561dad
-
SHA512
27fba63c368dd88bed8967290d496fe721638c71856a8cff2ee8104c1434ac896e13caaa05f34562081174aa22603ca1f4ddc31fb26361e5b06769dba9bb55e2
-
SSDEEP
1536:SXhmxFDl8luOTPwyFQQdh21yYtHZ2eeDbr0N0TjBek2GWUNykVH7:SXhmrDqlubyFDdg1yem4NC8Z8L97
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a0c5c6007d83ed2073be58f863f71c946304bbf920653cfeb6a866d0f1561dad.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pec1 Size: 43KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec3 Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrcU܉ Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE