Behavioral task
behavioral1
Sample
69cbadd65c48ad5b22a44f405b9faad3ab7e50bc62ae16bdf4805122d1af4660.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
69cbadd65c48ad5b22a44f405b9faad3ab7e50bc62ae16bdf4805122d1af4660.exe
Resource
win10v2004-20230220-en
General
-
Target
69cbadd65c48ad5b22a44f405b9faad3ab7e50bc62ae16bdf4805122d1af4660
-
Size
5.7MB
-
MD5
a3e00683f90fa46499ba89dfe5a57f7d
-
SHA1
c0c0c8733ad190c178c7b6d9e1fa612de7e7c83f
-
SHA256
69cbadd65c48ad5b22a44f405b9faad3ab7e50bc62ae16bdf4805122d1af4660
-
SHA512
48eec736ec5e77780133436c0b041d1f1aff0b27786a7354e4369e726ff29008fadfced30676a595804afc2a4f519805a118a317ea90c39dc4f3e88f013d234d
-
SSDEEP
98304:fUeuxegvf1Bu7YJoVxqjAPxNrBpH/ZuYkhxlerKdkwaMzCQddlkn8Bu2PlyqX:fUeRgHgr3PxNrbZuYkfl4YaMzCQd/u8Z
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 69cbadd65c48ad5b22a44f405b9faad3ab7e50bc62ae16bdf4805122d1af4660
Files
-
69cbadd65c48ad5b22a44f405b9faad3ab7e50bc62ae16bdf4805122d1af4660.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 488KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 96KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE