Behavioral task
behavioral1
Sample
89f16f70ea6180af0e340579913be9dc9ba65d7fa91f5c3c1f491c3e827d7e6f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
89f16f70ea6180af0e340579913be9dc9ba65d7fa91f5c3c1f491c3e827d7e6f.exe
Resource
win10v2004-20230220-en
General
-
Target
89f16f70ea6180af0e340579913be9dc9ba65d7fa91f5c3c1f491c3e827d7e6f
-
Size
16KB
-
MD5
1b99ad242d33d41e01f4c015bbb6498b
-
SHA1
54ba63517ec3cb06ba598a771527b02c09580e84
-
SHA256
89f16f70ea6180af0e340579913be9dc9ba65d7fa91f5c3c1f491c3e827d7e6f
-
SHA512
98fdc2faca8872461be98b7a335eabc0801efcb00e1a8026f7823afd5231da4f592ab437bc37ad4ac736855f9cc90b662506bb4f9231376eee23a52880b307cf
-
SSDEEP
384:KTPlQMEHvYENuyAxfr6+e9Pfqbn1WP7lbF7l5e:KzivHNuVxOha5WPRF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
89f16f70ea6180af0e340579913be9dc9ba65d7fa91f5c3c1f491c3e827d7e6f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE