Behavioral task
behavioral1
Sample
SecuriteInfo.com.BScope.Trojan.Packed.29975.29686.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BScope.Trojan.Packed.29975.29686.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.BScope.Trojan.Packed.29975.29686.exe
-
Size
765KB
-
MD5
5880c5cb36fddbfc2001bbe58d819c10
-
SHA1
ecaaa658dfc6652f9edf57b80347577168cfc21f
-
SHA256
529ef78cfb6ee8353c6f60fabd8b73ffc11667d3ae52f608a15c5c16a0a87f0d
-
SHA512
80b8efa0ed05f3ea9b63b3c8afc573dbb2e05ca63727a28a96fc4be6eed64fe583039291ec7e32da1985b66657e01d2a338a81ba110d46e8fbf316be328b211e
-
SSDEEP
12288:J8+KOKcg0yt6KR0xxSMiaArn6tiURAyTK9AUqVEQGjrlhzLJVxMIxzkaSgVXKgHe:0OYF61xxUaAr6ti+A0VF+LJAIcoRR
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.BScope.Trojan.Packed.29975.29686.exe
Files
-
SecuriteInfo.com.BScope.Trojan.Packed.29975.29686.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 488KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 55KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stolen Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
revenge Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE