Behavioral task
behavioral1
Sample
9f50a8048ac12ec8cce2cf75f019f5ecbf5e2b96e3c1b160bff67dcae00fc234.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f50a8048ac12ec8cce2cf75f019f5ecbf5e2b96e3c1b160bff67dcae00fc234.exe
Resource
win10v2004-20220812-en
General
-
Target
9f50a8048ac12ec8cce2cf75f019f5ecbf5e2b96e3c1b160bff67dcae00fc234
-
Size
100KB
-
MD5
3e0babde42ac02c5006a825dcc6e540d
-
SHA1
478e17b21e176946bbcba95b8cc636522623cff6
-
SHA256
9f50a8048ac12ec8cce2cf75f019f5ecbf5e2b96e3c1b160bff67dcae00fc234
-
SHA512
071dfa6f5787328cbb90205a82ef59fa835e7ed3f8ff30d613281bdc056a7f828064e830fb5c56dbc45ed11cf1e630fa65e358d30a02e855af7929e34de3de68
-
SSDEEP
3072:i/PKDnX/cHn0wxVw/E7OU96qcvuR+gJDNr:sSj/cHDxVuE6UU5vuggJDNr
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9f50a8048ac12ec8cce2cf75f019f5ecbf5e2b96e3c1b160bff67dcae00fc234.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 78KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE