Behavioral task
behavioral1
Sample
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe
Resource
win10v2004-20221111-en
General
-
Target
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4
-
Size
1.7MB
-
MD5
e88901f25a88238f741675bcae5c50db
-
SHA1
160f50bedb39adc6f70686870437173fdaf5b217
-
SHA256
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4
-
SHA512
81394842e45ca617ef59b52f80c91fa7c32a77edcb1eea83a8d304d3f56ddc3ffae654feb712d95b57a64b52aa67d6dc1d74d7ade431d320ee0d5d980a9e02f4
-
SSDEEP
49152:oVnRy4JdOyOXoIwhY5fnoG9rrmfCat5sajUy:oVnRyMQX6ofHOqUP
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 139KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 257KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE