Behavioral task
behavioral1
Sample
d4a935767eda786231015047d5d79670278d7a1c5e159b75128939a8b5a20cfe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4a935767eda786231015047d5d79670278d7a1c5e159b75128939a8b5a20cfe.exe
Resource
win10v2004-20220901-en
General
-
Target
d4a935767eda786231015047d5d79670278d7a1c5e159b75128939a8b5a20cfe
-
Size
286KB
-
MD5
7358e46c290cf2c59ff52c56fb814446
-
SHA1
a4533012c556bd9ee0f242566d6b34eb059ad7b3
-
SHA256
d4a935767eda786231015047d5d79670278d7a1c5e159b75128939a8b5a20cfe
-
SHA512
cfaf634948143a6c5a387f6e8d451d2179cb324ddc67d7ac6a6dada3cfbc30a28f09fd805af6bae57c0b92bc0c4b1b3bd1017ef088ee4001eeecbed3710c8451
-
SSDEEP
6144:GiLI/fNefYeMNTSMCiqBl8rK2jwQvSArk2CE82BlEgivxTJh1MRv:uvNTSzgr0SVCyBlEHJNbMRv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
d4a935767eda786231015047d5d79670278d7a1c5e159b75128939a8b5a20cfe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ASPack Size: 512B - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 285KB - Virtual size: 301KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE