Behavioral task
behavioral1
Sample
415fa702602c716fb483bc91aea21ddb97ea99d51481fd5e24fdcca93d33c7bb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
415fa702602c716fb483bc91aea21ddb97ea99d51481fd5e24fdcca93d33c7bb.exe
Resource
win10v2004-20230220-en
General
-
Target
415fa702602c716fb483bc91aea21ddb97ea99d51481fd5e24fdcca93d33c7bb
-
Size
5.1MB
-
MD5
500ca0c5742b7a57f2fc1e480ae47f51
-
SHA1
991ee3abdfda1ae581d19ebe6265de465b11b7db
-
SHA256
415fa702602c716fb483bc91aea21ddb97ea99d51481fd5e24fdcca93d33c7bb
-
SHA512
578d672f81d274fbd11ee4b159da2fb86ecf9b2bb0bbf9d745c2e352822222b1d3da7016c6a17ef5f284b164c59aba96e0220d13c5c71b0689dc355df35477d0
-
SSDEEP
98304:bXw3MrhEG/kyaBODVZdULmwlp1I80zAxB+Va6+jJS/3jo3H81Cib25zX:LkVBODVZaLmyBxxB+0j2TQipS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 415fa702602c716fb483bc91aea21ddb97ea99d51481fd5e24fdcca93d33c7bb
Files
-
415fa702602c716fb483bc91aea21ddb97ea99d51481fd5e24fdcca93d33c7bb.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 306KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 71KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.7MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 21KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE