Behavioral task
behavioral1
Sample
fd48bd4868e75b4fb8030f125d6b2f5957b0295ae839baeb2c5660767224dc0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd48bd4868e75b4fb8030f125d6b2f5957b0295ae839baeb2c5660767224dc0a.exe
Resource
win10v2004-20220812-en
General
-
Target
fd48bd4868e75b4fb8030f125d6b2f5957b0295ae839baeb2c5660767224dc0a
-
Size
12KB
-
MD5
d97328a1d23d4c04dde0de94a7233b5c
-
SHA1
ebf8b1fc501ea50922e5f9728c5a098b6e1f79ea
-
SHA256
fd48bd4868e75b4fb8030f125d6b2f5957b0295ae839baeb2c5660767224dc0a
-
SHA512
610771dca3cf82467ae3df5469882ae207f0b2efaf7e723aa6bb55fbfab907b5cfbdf1d8f15d79b2554d4f31094fcf01d89bfe690bd1b2d1ce6ff2b5099ea996
-
SSDEEP
192:VYt3DdsJ7zaHPDr/lpYHB3h18HrFnWXGlAxIwCMrpY7Y8LqPZo5LdCfffnMO3EN5:6YkYhR18HrBWXGlAxIr6+Y9PffPz
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fd48bd4868e75b4fb8030f125d6b2f5957b0295ae839baeb2c5660767224dc0a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE