Behavioral task
behavioral1
Sample
fd79fdaecb456f14f9453bb21741206d4e7e99d873cafd60813562074aa53020.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd79fdaecb456f14f9453bb21741206d4e7e99d873cafd60813562074aa53020.exe
Resource
win10v2004-20221111-en
General
-
Target
fd79fdaecb456f14f9453bb21741206d4e7e99d873cafd60813562074aa53020
-
Size
311KB
-
MD5
9b7c207da51af55f571a7015417c86c4
-
SHA1
1a71ab27ca9e0970fb3eee1ef692d834bd5e4b21
-
SHA256
fd79fdaecb456f14f9453bb21741206d4e7e99d873cafd60813562074aa53020
-
SHA512
15541df5ac8732274904c45551dd74e032cd6c635da3e253141ba226b4f9142e0e9d52a4d790d1933c7f32396a7320795792161cd6b6a1a21930fed26f83d42f
-
SSDEEP
6144:pQ+xeRKnTFPPhWgDuW58/zjUq95ZgpsbQcl5nSsmDU37orIK7:pLMRSPDDvAzjXgpGQcXiUiP
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fd79fdaecb456f14f9453bb21741206d4e7e99d873cafd60813562074aa53020.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.scpack Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 60KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE