Behavioral task
behavioral1
Sample
c1b28b1d620f4527b876594d27854360fbe564f86d965a866158abb5990e98d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1b28b1d620f4527b876594d27854360fbe564f86d965a866158abb5990e98d9.exe
Resource
win10v2004-20221111-en
General
-
Target
c1b28b1d620f4527b876594d27854360fbe564f86d965a866158abb5990e98d9
-
Size
166KB
-
MD5
3ca1ffd6b51e480a2b72b52c0b6cbaef
-
SHA1
077f1832c8e238e0c6d1674ada5fdf2351b8a211
-
SHA256
c1b28b1d620f4527b876594d27854360fbe564f86d965a866158abb5990e98d9
-
SHA512
8ec1e5dd91ba891caab56227241a73137efd95ccbb173b818b514f2fbe32639913d747cb0ca995b9e7f689585662f96134bed3bd39e47bc7eb02b40a863a5a1b
-
SSDEEP
3072:Ed4dJhm/CLHPdg9A8R01hbszYPywcjVyC/4Z9F:Ed47Pdr5fyYPlcb/yF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
c1b28b1d620f4527b876594d27854360fbe564f86d965a866158abb5990e98d9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.y Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE