Behavioral task
behavioral1
Sample
e47abed9c4a2d76aa49f5ce9853a1521779b4e1eb8604fa2bec956cbaa23e343.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
e47abed9c4a2d76aa49f5ce9853a1521779b4e1eb8604fa2bec956cbaa23e343.exe
Resource
win10v2004-20230621-en
General
-
Target
e8c8e1abc1ef2c38de386db9b4c60ef0.bin
-
Size
3.9MB
-
MD5
b8bfc6ac99f2d9efcefa9eb539dab99b
-
SHA1
e58298284b7c385c5d2fc83697150ad5ae77ad08
-
SHA256
f4c20699cb835150c41a9ab1e5527dac3096f13d89119eaed21bf1254ff68404
-
SHA512
d9c8561f9fe2813f3caabff6c351c2d9e6686e7db20353dc01db15520a7b031d22cbf94c3be7587aa28e01dc77fa7bcf1b698413b01c516448e2ebd605888422
-
SSDEEP
98304:KEETf2Vf+ih05w735jHBeRpLo8EnnoUKEGIC2zcOXtiGQ/:hUKf+fGL5DBeRS8Ao5J2zcmtiN/
Malware Config
Signatures
-
resource yara_rule static1/unpack001/e47abed9c4a2d76aa49f5ce9853a1521779b4e1eb8604fa2bec956cbaa23e343.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e47abed9c4a2d76aa49f5ce9853a1521779b4e1eb8604fa2bec956cbaa23e343.exe
Files
-
e8c8e1abc1ef2c38de386db9b4c60ef0.bin.zip
Password: infected
-
e47abed9c4a2d76aa49f5ce9853a1521779b4e1eb8604fa2bec956cbaa23e343.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 507KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE