Behavioral task
behavioral1
Sample
SecuriteInfo.com.FileRepMalware.8747.14832.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.FileRepMalware.8747.14832.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.FileRepMalware.8747.14832.exe
-
Size
15KB
-
MD5
f0e885fd2ccdf96dd69353ec28136f11
-
SHA1
5f749c903972e635de431aa184aecc474bc3cf7d
-
SHA256
2299d295a8b8dd467be869a5009dab65138c0e2699d919cb4674b706ad05db15
-
SHA512
d785d88bface096fec4dd78b68bf551fe66eaa879b72c5867938c4c576dc40b0a6cd3ab5def7a324ffc031cc31ed41a2bdb2e858fc4f496847ea21d816b6c560
-
SSDEEP
384:Yx6/zOgap8qH+GIgQGmkQsfjP5xftYAxDr6+S9Pfu7n5dwOi9:Y5gaGGIg4kQA5Tx6deVdwOc
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource SecuriteInfo.com.FileRepMalware.8747.14832.exe
Files
-
SecuriteInfo.com.FileRepMalware.8747.14832.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE