Behavioral task
behavioral1
Sample
a8a41638ceceb74ad1df78e372eeccd5e4f25cbca92c2ede6d66fb8b876a92bd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a8a41638ceceb74ad1df78e372eeccd5e4f25cbca92c2ede6d66fb8b876a92bd.exe
Resource
win10v2004-20221111-en
General
-
Target
a8a41638ceceb74ad1df78e372eeccd5e4f25cbca92c2ede6d66fb8b876a92bd
-
Size
232KB
-
MD5
03fcb3112b9cb9c5f2a297b7808cd9d0
-
SHA1
00ee52709f116213dfdca8980d38ceffbf1fbae3
-
SHA256
a8a41638ceceb74ad1df78e372eeccd5e4f25cbca92c2ede6d66fb8b876a92bd
-
SHA512
5bb67cae360a0177874574bf89753e050f7bd19bcead14880191bf03da0472e6d2f659645ae41c3052203b6f5c4313eecd1d93f65d0b5f2a1bac95e16c03ec3c
-
SSDEEP
6144:80DSZj7EJeKqrWTeZT4TyQOI5JgpcvqNplcYleba6w4qW:aZjIqWT8cT0Iw5pGb/w
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
a8a41638ceceb74ad1df78e372eeccd5e4f25cbca92c2ede6d66fb8b876a92bd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 90KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 136KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE