Static task
static1
Behavioral task
behavioral1
Sample
ASM_OperativesAdmn.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ASM_OperativesAdmn.exe
Resource
win10v2004-20230221-en
General
-
Target
ASM_OperativesAdmn.exe
-
Size
572KB
-
MD5
5bcb566516c91abb1209d1e831135382
-
SHA1
9f82e27515079a9edd76a0ac747f16eb30865562
-
SHA256
750d15c26caffed87d781e62f07e8b4bff95035b103d51394dd72f2e4710c91b
-
SHA512
1da2d815f0dfb4d8c226ae24a3b383c78af43e0e27b49b3a02ae8e2e31012e040c1b04917f23d6f836dde2f57374d2bc3956d7eecab5b881b642746bd3c04ee8
-
SSDEEP
12288:kZXaY89SVJcdqRm9mdccccccccccccccLcccccccccccccc:kZXaYGseyccccccccccccccLcccccccW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ASM_OperativesAdmn.exe
Files
-
ASM_OperativesAdmn.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 569KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ