Behavioral task
behavioral1
Sample
fcd5c17a16627ffd473422a20d84d247685d880e38343a1dacf7d1d27c3ee099.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fcd5c17a16627ffd473422a20d84d247685d880e38343a1dacf7d1d27c3ee099.exe
Resource
win10v2004-20220812-en
General
-
Target
fcd5c17a16627ffd473422a20d84d247685d880e38343a1dacf7d1d27c3ee099
-
Size
412KB
-
MD5
7c84ed460f53565705ce0b2f364ab232
-
SHA1
bcc1ab40075344dd8ff85991a2e13ecfa501f0b3
-
SHA256
fcd5c17a16627ffd473422a20d84d247685d880e38343a1dacf7d1d27c3ee099
-
SHA512
e03b4124b15a53324ce1c4d5bee0838a5149012e854263744867970289fe8c22062ccc6b176775cdeec47d553203ad998ffb8f6cc3b5f2a608b240af01e90eec
-
SSDEEP
12288:OP6ys+NgzZhkDjhtar0PxKhMdXnBnYxlBPdO4kspViMzdk:aBNUfk+wJzdqw4keJk
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fcd5c17a16627ffd473422a20d84d247685d880e38343a1dacf7d1d27c3ee099.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 166KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 227KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE