Behavioral task
behavioral1
Sample
f2d668c3885cf765cd06d0e1cb0bd23a276da3bb2c47ef6c117f163b63129400.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2d668c3885cf765cd06d0e1cb0bd23a276da3bb2c47ef6c117f163b63129400.exe
Resource
win10v2004-20221111-en
General
-
Target
f2d668c3885cf765cd06d0e1cb0bd23a276da3bb2c47ef6c117f163b63129400
-
Size
277KB
-
MD5
61f8692c10477c879442d703b5b18a36
-
SHA1
8a2e30c69c9ab60585ac62524ac410425b3b6356
-
SHA256
f2d668c3885cf765cd06d0e1cb0bd23a276da3bb2c47ef6c117f163b63129400
-
SHA512
0c37226fa52d2da70d05cb79f8f659c607230d997806e79478232098aefd8d5de6867779641a81d763d1dd576a8447998088e88ed314ffbfd65408b19b10c2e1
-
SSDEEP
6144:w1OYTu+uh/oHlCiIlucl3TADje6fhTSbHP0Ebr:JXigNS2khmH9
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f2d668c3885cf765cd06d0e1cb0bd23a276da3bb2c47ef6c117f163b63129400.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 27KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE