Behavioral task
behavioral1
Sample
fa55c7c52d9affe6f238b66d3af7ff72a828270c9202717006e18c2074eb45ca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa55c7c52d9affe6f238b66d3af7ff72a828270c9202717006e18c2074eb45ca.exe
Resource
win10v2004-20220901-en
General
-
Target
fa55c7c52d9affe6f238b66d3af7ff72a828270c9202717006e18c2074eb45ca
-
Size
461KB
-
MD5
b1064b7990b7863bc43b9d1a05a26f44
-
SHA1
0bd4e46643fd631a6c97617d006f300e2a6e510a
-
SHA256
fa55c7c52d9affe6f238b66d3af7ff72a828270c9202717006e18c2074eb45ca
-
SHA512
6c072ac406caae6bc3ffcf8d70373c34a51b04b6ae2b04e47b96c66fae5aa110d1debe1899c5ffdf7a83421ffb2bd356cdb201f090985ba4cdd16402fb8805bf
-
SSDEEP
12288:L0vWs/Zv6p8p6nkf6ci9pgYdEGT/8yvayAS+lS:av6p8pgY6lhKGT8FS+l
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
fa55c7c52d9affe6f238b66d3af7ff72a828270c9202717006e18c2074eb45ca.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�V�� Size: 348KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE