Behavioral task
behavioral1
Sample
99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe
Resource
win10v2004-20230220-en
General
-
Target
99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c
-
Size
4.2MB
-
MD5
8c666fd9e890ebb0fa49bc30ff4096a9
-
SHA1
774dc34985210b982fbc4fc61d8d5c52ecaaee69
-
SHA256
99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c
-
SHA512
a459f2323e16da025a542e2bc2aa7d9072985a6cf1b0b0cb0b2cfde2a8cbe1e1a548c6e771facf09ad2f92a6fbbd54e4709c35a05030196b8caa1f06513e3725
-
SSDEEP
98304:hwYjo6PHuuzNo4LrNZC3V0oZ1o0WRf3KVFKz18VA2/D:mVauuzbjU2a19WZ3KyaNL
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.2MB - Virtual size: 32.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE