Behavioral task
behavioral1
Sample
caccb4010cd7cdee345129f434e57795910bdf467925eb10f2cdf4e5cbb4269d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
caccb4010cd7cdee345129f434e57795910bdf467925eb10f2cdf4e5cbb4269d.exe
Resource
win10v2004-20221111-en
General
-
Target
caccb4010cd7cdee345129f434e57795910bdf467925eb10f2cdf4e5cbb4269d
-
Size
260KB
-
MD5
f0d0014ea6da7240a7be76221a7cfe13
-
SHA1
a42f9245d150459480e758429376dd08f41d8caf
-
SHA256
caccb4010cd7cdee345129f434e57795910bdf467925eb10f2cdf4e5cbb4269d
-
SHA512
d59231ea4ea2370857ee293240f5e87a2936676293c00bd6c2487608781c3a8d3c6ccf8dd9426ca85d1b6814f06e8c803e29fdd72dd72a17710d249fc7a08b55
-
SSDEEP
6144:IKpxDTzzD2i0hypHddqXnmZAHoHbNjjOzeqfufCGyrGxKkLS4fv:IAxPD2i1d4XKAatj7qfBVGxKk9v
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
caccb4010cd7cdee345129f434e57795910bdf467925eb10f2cdf4e5cbb4269d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ASPack Size: 512B - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 259KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE