Behavioral task
behavioral1
Sample
415f411ae8bb1c41244b6b498957e8ebc548d2493956ce5ac04120b52c7a451f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
415f411ae8bb1c41244b6b498957e8ebc548d2493956ce5ac04120b52c7a451f.exe
Resource
win10v2004-20230220-en
General
-
Target
415f411ae8bb1c41244b6b498957e8ebc548d2493956ce5ac04120b52c7a451f.zip
-
Size
318KB
-
MD5
ac0b96230453e9df007727ee9db80a20
-
SHA1
9c46461b22ad2f807bfebd74547a9e3cb66ddfb6
-
SHA256
22de7d3a644c0ab7f0a858c260d8e09e25cbe7a47698f6d522cc97605278afdc
-
SHA512
46ba0847fbbf6d2bfc41133d0459954da0596186e0eb3d001b81de4863356741533b404a9776dbf121022b0806e4a8528b555a5320671b273601fe6294e176db
-
SSDEEP
6144:DBEmldYK/idDvIdDJnpCGV3pmICso/XU8cDJBNAUTRS0J79:DBLlMdD+LZmICsoxsBusH
Malware Config
Signatures
-
resource yara_rule static1/unpack001/415f411ae8bb1c41244b6b498957e8ebc548d2493956ce5ac04120b52c7a451f.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/415f411ae8bb1c41244b6b498957e8ebc548d2493956ce5ac04120b52c7a451f.exe
Files
-
415f411ae8bb1c41244b6b498957e8ebc548d2493956ce5ac04120b52c7a451f.zip.zip
Password: infected
-
415f411ae8bb1c41244b6b498957e8ebc548d2493956ce5ac04120b52c7a451f.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 225KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE