Behavioral task
behavioral1
Sample
b700cfc5b2385a0937f4f6bea2291b668a5ce85fdc88628be7ae41afb23c57fd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b700cfc5b2385a0937f4f6bea2291b668a5ce85fdc88628be7ae41afb23c57fd.exe
Resource
win10v2004-20230703-en
General
-
Target
b700cfc5b2385a0937f4f6bea2291b668a5ce85fdc88628be7ae41afb23c57fd
-
Size
596KB
-
MD5
cdfa0e56ddf56f90f9643baf267eeb5d
-
SHA1
ead147947a7e3706f7370e21f0551e86b33203f1
-
SHA256
b700cfc5b2385a0937f4f6bea2291b668a5ce85fdc88628be7ae41afb23c57fd
-
SHA512
fd3b9cc2bc54db6a2207b7c0fb6bca3fd0d7576837abb8bd5413eee434fa7cd2dc2b0ed2fee69e2c6bcfa293408696cd7685da3c03adb705133c62ed14cce1da
-
SSDEEP
12288:8EbEEMeJxz2EQj2psWhPiIqFa6e3i7anEf79nrw:peeJIjksWhKJw
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b700cfc5b2385a0937f4f6bea2291b668a5ce85fdc88628be7ae41afb23c57fd
Files
-
b700cfc5b2385a0937f4f6bea2291b668a5ce85fdc88628be7ae41afb23c57fd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 86KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 129KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
buyaoba Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE