Behavioral task
behavioral1
Sample
e1e74db2d327a115cce872da48d724d3f8133495017b5dc05dbd5cf04447c127.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e1e74db2d327a115cce872da48d724d3f8133495017b5dc05dbd5cf04447c127.exe
Resource
win10v2004-20230220-en
General
-
Target
e1e74db2d327a115cce872da48d724d3f8133495017b5dc05dbd5cf04447c127
-
Size
2.9MB
-
MD5
56c317a3f7b28d70ed6e50e0d734f36d
-
SHA1
3f2a97bce5bf85ed90ff45def10155188e0a668f
-
SHA256
e1e74db2d327a115cce872da48d724d3f8133495017b5dc05dbd5cf04447c127
-
SHA512
9d7fa49cf08be5665643d4de5abe788ac19539325a8bb536486a63f33756bbf34d6b005e8b3a117d30029d3e6c08e91392e54afd37e57e0c092ec37c6fea843a
-
SSDEEP
49152:mFVBfD2A1RKZjHl2uT/5qChU64B3ZD2HmZ5ukLOKB8swfzJcK5url51yz+/5+pHa:KVxl1QZZ5TkChU6ypBfuiO1clyz+/5+k
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
e1e74db2d327a115cce872da48d724d3f8133495017b5dc05dbd5cf04447c127.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ASPack Size: 512B - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 1.9MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE