asrun[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

asrun.exe
Size

693KB
MD5

43cae546085df772e89bc5951bc0d10a
SHA1

6d02b4a92f24fab3482edec8e653d696409f922e
SHA256

91bc6748402337b852d311eda73b25ac1349f78259743a37d5a6d9836a68380a
SHA512

06aeb065b3bbcd7d998f0edb7d652db74235eb16fbc938a5eaf757e711019f8eff004900ac5ebee17dcf0997ae9dee5ac9779f9edbe36fb9dac9f4259c55dae8
SSDEEP

12288:ZNxbHB67sIQna4QrL7FYRgcLdKZqZbZrhGpNb8QK8K1MHu:3nspNwQK+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
asrun.exe

Files

asrun.exe
.exe windows x86

2f0cb91b6c293cd4de8206b8c9f19465

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Imports

kernel32

AddAtomA
CreateProcessA
ExitProcess
FindAtomA
GetAtomNameA
GetExitCodeProcess
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
strcpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ