Behavioral task
behavioral1
Sample
9e7a6677865f610072f2bcc90a8f245e64426d60751558e594068a06b5e6c44a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e7a6677865f610072f2bcc90a8f245e64426d60751558e594068a06b5e6c44a.exe
Resource
win10v2004-20221111-en
General
-
Target
9e7a6677865f610072f2bcc90a8f245e64426d60751558e594068a06b5e6c44a
-
Size
108KB
-
MD5
1e77a4f473c438b1180cc069dbc93a2e
-
SHA1
482f06acf6d8b53a49498fb1f8b342b44b689d83
-
SHA256
9e7a6677865f610072f2bcc90a8f245e64426d60751558e594068a06b5e6c44a
-
SHA512
5457efc43afd1f3b8adbc0e34b253d098b73e5ee301865cb00d0615eac67a7b730bb2097a95486a027c5e39ca181fd0a01c56dfec03abe5e6ac221fa87ae899c
-
SSDEEP
3072:9XHAC4o9qdnxrDqcA0o3CqrgsY0IZtL/JHlYGiNWFq:9Xg7ognhq90XqrsbfyAc
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9e7a6677865f610072f2bcc90a8f245e64426d60751558e594068a06b5e6c44a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 211B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE