Behavioral task
behavioral1
Sample
71c65bc7bc1e237198062865977b512dc53e94d86416c3059bd3496a01ebccb9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
71c65bc7bc1e237198062865977b512dc53e94d86416c3059bd3496a01ebccb9.exe
Resource
win10v2004-20221111-en
General
-
Target
71c65bc7bc1e237198062865977b512dc53e94d86416c3059bd3496a01ebccb9
-
Size
213KB
-
MD5
1427cfee7adffa3aef73fd10db877c50
-
SHA1
3d10467eb61d7f81d6552a539e2386b074920c43
-
SHA256
71c65bc7bc1e237198062865977b512dc53e94d86416c3059bd3496a01ebccb9
-
SHA512
1b45fe5c9b82d653a14e8270c9a2e5c813f04d6ba7e5c4a08bd8e54c85958c18903442ce5756d7c628a447f8e8017ea3a4f53d5578728236dc84a64fc76f8ee9
-
SSDEEP
3072:VL3A6bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7HEj77wbq:VLQEwvP6bQ7yMP+DE827
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
71c65bc7bc1e237198062865977b512dc53e94d86416c3059bd3496a01ebccb9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MyRooN Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE