Static task
static1
Behavioral task
behavioral1
Sample
AspNet.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
AspNet.exe
Resource
win10v2004-20230221-en
General
-
Target
AspNet.exe
-
Size
301KB
-
MD5
e615d3b882d4cc75cbc5393d0c02d875
-
SHA1
462701be933d6431fe97d534ad1d72dfe75b3d38
-
SHA256
c6f75923fada6b5d30e3af6a03e9af408c4344e596668dd059e77da9c64080c2
-
SHA512
4dd5183a1a627b210a92611226286b663a1fb041f39d059ddb8550370c14786445aa9730022ff18415a25555e0d40c6068f76c4327c3cc0e6c7add4a902c9e5a
-
SSDEEP
6144:0KakccB3Ca1sc9cB39U4zzjloGx6OOd2dgodSiEfvjecB3:0KecBXsQcBIodmbecB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AspNet.exe
Files
-
AspNet.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 274KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ