Behavioral task
behavioral1
Sample
ac4b61e30e491f25e5d9d71644494eba2f89991e44734c6e81082703482fedfe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ac4b61e30e491f25e5d9d71644494eba2f89991e44734c6e81082703482fedfe.exe
Resource
win10v2004-20220812-en
General
-
Target
ac4b61e30e491f25e5d9d71644494eba2f89991e44734c6e81082703482fedfe
-
Size
141KB
-
MD5
c96350760b86a49c9ca4e9588d5e002d
-
SHA1
139efbd15ea6ce85b9d11bcf4d13786c01ecca11
-
SHA256
ac4b61e30e491f25e5d9d71644494eba2f89991e44734c6e81082703482fedfe
-
SHA512
a38eaa95896b505d1c5c152491a8eb6f43158731d784ff9a8d583fa5a90a3519791a2ab32ed128e57f97bcbd287c8ace7abdfc6216d566c503e09490ea32e99c
-
SSDEEP
3072:gK87MhEbiXDWIm3qpMd6jtFhIDvct8X4PtwjkqlkO+z:gKSIma1DAvct0Wp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
ac4b61e30e491f25e5d9d71644494eba2f89991e44734c6e81082703482fedfe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 135KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE