Behavioral task
behavioral1
Sample
fe2d8a6c1e21a7e533ac57e7e9a9e97a54e3d0cd130ff4d516b46f94be4d271d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fe2d8a6c1e21a7e533ac57e7e9a9e97a54e3d0cd130ff4d516b46f94be4d271d.exe
Resource
win10v2004-20230703-en
General
-
Target
fe2d8a6c1e21a7e533ac57e7e9a9e97a54e3d0cd130ff4d516b46f94be4d271d
-
Size
1.5MB
-
MD5
08b92c3d20efa8fe676db2854207bd11
-
SHA1
eb68e2d2c409ff14ac640b3d7d6aa5b81b510f00
-
SHA256
fe2d8a6c1e21a7e533ac57e7e9a9e97a54e3d0cd130ff4d516b46f94be4d271d
-
SHA512
231ed84fb73859e69415eadaef8e606f8857e416459318e5408bb7c320097fb82bed317c4a475c37170fb203239a8859361d39a0d440187888c499cc7b559954
-
SSDEEP
24576:IkiBPW6TFt4v7FFg5w64ykM5ufQSrBQDITol2b6b3w0MWEVh1IBY361Cs+VLlGn7:Piwgq7FSW6rkM5ufp60b6Z9Owo61B+Vc
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe2d8a6c1e21a7e533ac57e7e9a9e97a54e3d0cd130ff4d516b46f94be4d271d
Files
-
fe2d8a6c1e21a7e533ac57e7e9a9e97a54e3d0cd130ff4d516b46f94be4d271d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE