Behavioral task
behavioral1
Sample
f1555ff6dddd7d51165485ea30c25eac26cfd6720dd942c4bdfae0423c19e6a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1555ff6dddd7d51165485ea30c25eac26cfd6720dd942c4bdfae0423c19e6a8.exe
Resource
win10v2004-20221111-en
General
-
Target
f1555ff6dddd7d51165485ea30c25eac26cfd6720dd942c4bdfae0423c19e6a8
-
Size
20KB
-
MD5
16967bb204115db13bfdc04f9769af50
-
SHA1
cfcd1dbb6cc5f83f1126ba9293265360f9a309f6
-
SHA256
f1555ff6dddd7d51165485ea30c25eac26cfd6720dd942c4bdfae0423c19e6a8
-
SHA512
b610ea1cea62247d248b26b5e31a887d11ecd78e2723c2a0abb058228d43773fa15a614967376dad080e10f603661d08a417b609703488ea5bb38a56b9449d21
-
SSDEEP
384:8gnFoEYXZAbYRxsN+k8U2Op+btiEd1y5MDhF4bJsUgAxwr6+S9Pfu7n5:RYJAbh4k1FMN1nlqdnrx3deV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f1555ff6dddd7d51165485ea30c25eac26cfd6720dd942c4bdfae0423c19e6a8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
-BLTEAM- Size: 15KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE