Behavioral task
behavioral1
Sample
b46bd6e60284fa1111ee381c3c76ee51f6818d4872706d5496f9c50559e970d5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b46bd6e60284fa1111ee381c3c76ee51f6818d4872706d5496f9c50559e970d5.exe
Resource
win10v2004-20220812-en
General
-
Target
b46bd6e60284fa1111ee381c3c76ee51f6818d4872706d5496f9c50559e970d5
-
Size
130KB
-
MD5
e29f0f2be49a2aa698b42dd3b09bba93
-
SHA1
613ef05b1d862e2d9327105c40c760bb997257b8
-
SHA256
b46bd6e60284fa1111ee381c3c76ee51f6818d4872706d5496f9c50559e970d5
-
SHA512
d0c05540555b86ba20c464455e58777f32ed5cc531ace831c25a250a9756fdcfc8711d29c63aa165ad946b581c75903f32963d1baf2d12307988ab1a2ca230b3
-
SSDEEP
3072:pFtTEQtNGPW66VlBsTLgfkNZm9YCgcRA2zFQPZ4vWtcG:/bYrTBZm9JgcPIVtr
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
b46bd6e60284fa1111ee381c3c76ee51f6818d4872706d5496f9c50559e970d5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TGOx7H2 Size: 512B - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.06a1gE1 Size: 129KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE