Behavioral task
behavioral1
Sample
fcbb4dce4a80e06d0d44a0c14a67d8ced01172b478cf65b67a0ca4e36092315f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcbb4dce4a80e06d0d44a0c14a67d8ced01172b478cf65b67a0ca4e36092315f.exe
Resource
win10v2004-20221111-en
General
-
Target
fcbb4dce4a80e06d0d44a0c14a67d8ced01172b478cf65b67a0ca4e36092315f
-
Size
170KB
-
MD5
0bde151394b94d91bd4a503198480c45
-
SHA1
df572621dde562640191540124ff2743502856e9
-
SHA256
fcbb4dce4a80e06d0d44a0c14a67d8ced01172b478cf65b67a0ca4e36092315f
-
SHA512
a634478494a3efa25ee4c3735530855ae596ce4a936c5ac1871a12d4115631e8a122fb04754111fafdefbeac46da0755319232b592abe60c1fb54ba0cae1884a
-
SSDEEP
3072:BkgdzHCxIX59qol268JJjg/ospD1dD5kkiPYTBaU0Bb:hbCx2FluJ6Bd1dyjab0B
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fcbb4dce4a80e06d0d44a0c14a67d8ced01172b478cf65b67a0ca4e36092315f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE