Behavioral task
behavioral1
Sample
194c783d8648742fe63ae22a6f3ae0456a50a553b9d9b463c1e4e0434da5978a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
194c783d8648742fe63ae22a6f3ae0456a50a553b9d9b463c1e4e0434da5978a.exe
Resource
win10v2004-20230220-en
General
-
Target
194c783d8648742fe63ae22a6f3ae0456a50a553b9d9b463c1e4e0434da5978a
-
Size
740KB
-
MD5
731f66741a42f6aba9d631b1776e51b8
-
SHA1
ad9af426e99f3633d1fd6552e0336ce5c4c25a1c
-
SHA256
194c783d8648742fe63ae22a6f3ae0456a50a553b9d9b463c1e4e0434da5978a
-
SHA512
371d498179e0ec3225b6a81e95dc50bd66c99465292e055384c8252c2fedb168db7348783f6ce7d5f81115586ccaa6e914710c5a3786a1dc79022eae7bd4483f
-
SSDEEP
12288:tRN41aeXnHf+w1v9h1W+UMfw1imZU50UNyP1tHS8yniqBA/ebuNMKL1zbqENS:3N41db1HM+Ugw47xA9BqBA/oU3NS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 194c783d8648742fe63ae22a6f3ae0456a50a553b9d9b463c1e4e0434da5978a
Files
-
194c783d8648742fe63ae22a6f3ae0456a50a553b9d9b463c1e4e0434da5978a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 379KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 285KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE