Behavioral task
behavioral1
Sample
9a3e459faa374ba27396ccf0b772a1c119c84d575c16d6ded886ad992186ebbd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9a3e459faa374ba27396ccf0b772a1c119c84d575c16d6ded886ad992186ebbd.exe
Resource
win10v2004-20230220-en
General
-
Target
9a3e459faa374ba27396ccf0b772a1c119c84d575c16d6ded886ad992186ebbd
-
Size
1.6MB
-
MD5
8bf9878da503a26de82a34e5c98125ec
-
SHA1
f98ea7f18db056a53be430d1c8ace288c9dbedd2
-
SHA256
9a3e459faa374ba27396ccf0b772a1c119c84d575c16d6ded886ad992186ebbd
-
SHA512
22270fc5fafbac1a73c3a3f788e39cf93fc3c7567bc38fe1d9671494bba7338e7101d045014e979fd96e1dbd081c186120411e85767faf48f791a8dcdb460daf
-
SSDEEP
24576:pcSWTS1O+ILNCggb0Mirj3YjGSoruAQmYdCbddyTPBA8Ugg3nWAUwFbmMoV0HOvl:mhS1ORCggb0MirLKFUOVIbd+GHzUseVN
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
9a3e459faa374ba27396ccf0b772a1c119c84d575c16d6ded886ad992186ebbd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 377KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 105KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 58KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asp Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE