Behavioral task
behavioral1
Sample
c1995fa2e070fce28312b364f8218f959e435cd3a35a7352829400ae7716a5ac.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c1995fa2e070fce28312b364f8218f959e435cd3a35a7352829400ae7716a5ac.exe
Resource
win10v2004-20230220-en
General
-
Target
c1995fa2e070fce28312b364f8218f959e435cd3a35a7352829400ae7716a5ac
-
Size
1.8MB
-
MD5
47695f4ac0759e707a25c38dc7c7e7d3
-
SHA1
153cbb6b88c43008d0240eed91b658c356e59558
-
SHA256
c1995fa2e070fce28312b364f8218f959e435cd3a35a7352829400ae7716a5ac
-
SHA512
4cc72efc98c100ed59423cf10cb925764136854ef516e1ebc8e80f194302a6ad5ddf0f7ed5ec3a7f133b607be348904ce54b916ea797cfd966f3bb2efabe5ccd
-
SSDEEP
49152:hRuc7bcTk9gIpLgt0Hsn/xpqTD11dpcXG:hRuc719gI16L/SXdpcX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1995fa2e070fce28312b364f8218f959e435cd3a35a7352829400ae7716a5ac
Files
-
c1995fa2e070fce28312b364f8218f959e435cd3a35a7352829400ae7716a5ac.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 1.3MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 507KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE