Behavioral task
behavioral1
Sample
602d4db2749d2497028c155cfa0fac7a4ea6f9a8eb945c980abb3375c33ee927.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
602d4db2749d2497028c155cfa0fac7a4ea6f9a8eb945c980abb3375c33ee927.exe
Resource
win10v2004-20221111-en
General
-
Target
602d4db2749d2497028c155cfa0fac7a4ea6f9a8eb945c980abb3375c33ee927
-
Size
114KB
-
MD5
1ed301f73944da3fc83b3d56eb0bb510
-
SHA1
c6376881e2e9c1f023bdb6da53db633bf0581001
-
SHA256
602d4db2749d2497028c155cfa0fac7a4ea6f9a8eb945c980abb3375c33ee927
-
SHA512
9b379a82ec425768287119402ac41e19688f2c0b2822d87bd94581ca6975c3048b7e193d8a8adcb8624269078bd36e242a1289a2e220f3746982d01657de04f7
-
SSDEEP
3072:au3wzkGhhXvIQTCmn6zfeMTZ2qc06IEsu1:L34BvwD92KTg
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
602d4db2749d2497028c155cfa0fac7a4ea6f9a8eb945c980abb3375c33ee927.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 86KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��� Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE