Behavioral task
behavioral1
Sample
313e2fcf9bfd995a6c6c0e4b425b366c63010d2a921228eac04fe6951a356528.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
313e2fcf9bfd995a6c6c0e4b425b366c63010d2a921228eac04fe6951a356528.exe
Resource
win10v2004-20230220-en
General
-
Target
313e2fcf9bfd995a6c6c0e4b425b366c63010d2a921228eac04fe6951a356528
-
Size
2.3MB
-
MD5
56dccb5cb246d0e782bdf1e9b2d1fecb
-
SHA1
3e05fb21ffa7f332d909eb453e47423d7c11b1fe
-
SHA256
313e2fcf9bfd995a6c6c0e4b425b366c63010d2a921228eac04fe6951a356528
-
SHA512
a37dfd9dd694de88aaa31c42c2a339bec9e2519349118fa712d30b5c5d339c80a764d25b9d5bc41a4f67d8b612480d92cc7d7f82193b374904e1519a7804aaad
-
SSDEEP
49152:MHq9AJ1tcRryJshiSm3nQf6ql0vhHj23af5gaXcrmA2h1xrig4VNEi:MVJbcRR8Dq6oCSGcrP2UpNEi
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 313e2fcf9bfd995a6c6c0e4b425b366c63010d2a921228eac04fe6951a356528
Files
-
313e2fcf9bfd995a6c6c0e4b425b366c63010d2a921228eac04fe6951a356528.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 332KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.9MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE