Behavioral task
behavioral1
Sample
f6ddb0e79f350149eb1a5ad08ddaa35cc95e58c914c1190266ad959918bea9fd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6ddb0e79f350149eb1a5ad08ddaa35cc95e58c914c1190266ad959918bea9fd.exe
Resource
win10v2004-20220901-en
General
-
Target
f6ddb0e79f350149eb1a5ad08ddaa35cc95e58c914c1190266ad959918bea9fd
-
Size
114KB
-
MD5
72f7f77416f83d09cb840e3ac690c205
-
SHA1
c6c467d53ba6734eed668f17695d058b60a0f311
-
SHA256
f6ddb0e79f350149eb1a5ad08ddaa35cc95e58c914c1190266ad959918bea9fd
-
SHA512
1be36c218d15bf3360f747646f0d975f1512ce7e792d518a6ee7f0aafdb79589ea5402dc77bf36425cf9cf7ef9e365fc934d6ad42bbb016a4e1d5ee2616a450a
-
SSDEEP
3072:NHHc77aYk5Rzenfnyn6wIKLISBZ1Y2EsTt+7fluRFU9Vjxu1:NHHc7G/5NenqnsKLJBjhE2sh/u1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f6ddb0e79f350149eb1a5ad08ddaa35cc95e58c914c1190266ad959918bea9fd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.afv Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 23KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 67KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE