Behavioral task
behavioral1
Sample
9ab8b38f150ab49b309bcfe1f2b66013caa76828a06dfbf061c2af39c1d66f2b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ab8b38f150ab49b309bcfe1f2b66013caa76828a06dfbf061c2af39c1d66f2b.exe
Resource
win10v2004-20220812-en
General
-
Target
9ab8b38f150ab49b309bcfe1f2b66013caa76828a06dfbf061c2af39c1d66f2b
-
Size
98KB
-
MD5
6defc158030807afb8ee9ef382ee6cc4
-
SHA1
7bef59ec3c9aba28739a08e5bfca736545ebfa16
-
SHA256
9ab8b38f150ab49b309bcfe1f2b66013caa76828a06dfbf061c2af39c1d66f2b
-
SHA512
17e600d5c3977298687ad0de78af1ca3e1600203327cced25640e360f36766fd2840257a45a5b87bb2bf7a68f58be7a87374f1e0563ed52c0fea57a269c95257
-
SSDEEP
3072:NHlTL8MdZX8CDNtcrE4mzfOv9lH5ANJaYNWY4Ypu:NHl1ZtcrCDOzHWtdu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9ab8b38f150ab49b309bcfe1f2b66013caa76828a06dfbf061c2af39c1d66f2b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE