Behavioral task
behavioral1
Sample
e29ae25b40838273e9f057e4cb20c88434b425c0b31bd121b42c635f6c829fc0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e29ae25b40838273e9f057e4cb20c88434b425c0b31bd121b42c635f6c829fc0.exe
Resource
win10v2004-20230220-en
General
-
Target
e29ae25b40838273e9f057e4cb20c88434b425c0b31bd121b42c635f6c829fc0
-
Size
3.1MB
-
MD5
199fada4cb4eb7f6516917ab31405dca
-
SHA1
91b5dd733e1caeef17c9ffae40fc56f3213378ca
-
SHA256
e29ae25b40838273e9f057e4cb20c88434b425c0b31bd121b42c635f6c829fc0
-
SHA512
dbe3d43c1d76537aaf08b54ab9bb9482f31f8bd52986db8242f96f9063e9bd58b21f30ca99c8e40f6c409efc13d4cbca380711b8291d6e94c2195f50d8dfe73b
-
SSDEEP
98304:6hf5XHkqRc7zjCZ4OsQkgA9dQSGxQbixoW2ZRRazs8:6RtkqRO+WQyQlx6iKWIj8
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e29ae25b40838273e9f057e4cb20c88434b425c0b31bd121b42c635f6c829fc0
Files
-
e29ae25b40838273e9f057e4cb20c88434b425c0b31bd121b42c635f6c829fc0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.6MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 33KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 486KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE