Behavioral task
behavioral1
Sample
13c67524693f3ff77b59b1f37aa2d137068458ea4038144e04b7dcb6cd875e35.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
13c67524693f3ff77b59b1f37aa2d137068458ea4038144e04b7dcb6cd875e35.exe
Resource
win10v2004-20230621-en
General
-
Target
13c67524693f3ff77b59b1f37aa2d137068458ea4038144e04b7dcb6cd875e35
-
Size
72KB
-
MD5
dda4560252788eecc942bca624c64c18
-
SHA1
4d6f44c8e2241a201a9c8e9a80f4cf957aee0183
-
SHA256
13c67524693f3ff77b59b1f37aa2d137068458ea4038144e04b7dcb6cd875e35
-
SHA512
b830461d85312861698e96da3f55d2a9b853b4a1a85165a6412db282f3a5b10dad684948c12b64baa1202716f409510df5129e5fcd8d37c74fa368af60899121
-
SSDEEP
1536:uNUTKAK5b+m6OAlzxve5RSKrj43gYquXUW69mb:uafeb+mzADwRuQYqfcb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13c67524693f3ff77b59b1f37aa2d137068458ea4038144e04b7dcb6cd875e35
Files
-
13c67524693f3ff77b59b1f37aa2d137068458ea4038144e04b7dcb6cd875e35.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ucgradv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE