Behavioral task
behavioral1
Sample
a68df62ebb3b78a2730dedce2008b854da29b36d84999c9279b1eb9ee359f45a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a68df62ebb3b78a2730dedce2008b854da29b36d84999c9279b1eb9ee359f45a.exe
Resource
win10v2004-20230220-en
General
-
Target
a68df62ebb3b78a2730dedce2008b854da29b36d84999c9279b1eb9ee359f45a
-
Size
1.1MB
-
MD5
b997369a0c04abf46b25b579dfc710fc
-
SHA1
86c1ac8c2aa723897e5a53de46f9c5154f7233cf
-
SHA256
a68df62ebb3b78a2730dedce2008b854da29b36d84999c9279b1eb9ee359f45a
-
SHA512
557058c99fccd29515ffe88a8279e2640228aa7c233e6cb7126a9d60687f8386aa52f4d740d0c10b11ca3d594d47dba43c9046878d89d90e526d89bce0b0b458
-
SSDEEP
24576:kaKreoADHQarS59X2QSQCQ9jsQ+s1mGqYKbKp:urezUn9X7SQCQ9AxmjK+p
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
a68df62ebb3b78a2730dedce2008b854da29b36d84999c9279b1eb9ee359f45a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 684KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 226KB - Virtual size: 9.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE