Behavioral task
behavioral1
Sample
8609995db3684d426a0e91beaecc172fab0fa43e1006da16c0ef5ed6beb795a0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8609995db3684d426a0e91beaecc172fab0fa43e1006da16c0ef5ed6beb795a0.exe
Resource
win10v2004-20230220-en
General
-
Target
8609995db3684d426a0e91beaecc172fab0fa43e1006da16c0ef5ed6beb795a0
-
Size
4.9MB
-
MD5
3988b740a776a88f8a3ba9ddfaa6cbb1
-
SHA1
50758016066c9353b6b0db360fd5ed30cf56a0d8
-
SHA256
8609995db3684d426a0e91beaecc172fab0fa43e1006da16c0ef5ed6beb795a0
-
SHA512
cda9e23dbe10ae968715c08dcedcc274248f0c441a60a652d3c923d8ca7edd50adf6a026a43eb34032533440e4f3ecf5b9ee8d03f867bf3dad32cbc53a4c8830
-
SSDEEP
98304:uxxSruAGbl51kDt/H9bieeN7AaZRdZDHLCh/M6/yVacc/:CSrk31Y1bdeNkaZR/nCh/M6aVaX/
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242
Files
-
8609995db3684d426a0e91beaecc172fab0fa43e1006da16c0ef5ed6beb795a0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 837KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 108KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FK0 Size: 1024KB - Virtual size: 8.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FK1 Size: 1.7MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE