Behavioral task
behavioral1
Sample
cd570e1a4c3d0d02584c0fc9026888022a4af8069ebb38f43b8e942e1dc70269.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
cd570e1a4c3d0d02584c0fc9026888022a4af8069ebb38f43b8e942e1dc70269.exe
Resource
win10v2004-20230703-en
General
-
Target
cd570e1a4c3d0d02584c0fc9026888022a4af8069ebb38f43b8e942e1dc70269
-
Size
311KB
-
MD5
49a8b4904574ced9db3532152a70af4f
-
SHA1
ae8ff564fe49f0e6657fea0cd3ba7b1d9f2aef63
-
SHA256
cd570e1a4c3d0d02584c0fc9026888022a4af8069ebb38f43b8e942e1dc70269
-
SHA512
49cb4c9b31e74d0920d15b5f3eea3caaf9a11241ed605e1f79d16d840d8b15885e2ecf2c03a8eca072ce427d9c5210d29ced13005f1feda67a2eb84ee1f02955
-
SSDEEP
6144:w9KmRKDdoE6tuz4lF4EkwCTVrOw0sltOJAov5BBSg5UeY:c3QDaE6tuz4UwCTZOTctOOov5BM
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd570e1a4c3d0d02584c0fc9026888022a4af8069ebb38f43b8e942e1dc70269
Files
-
cd570e1a4c3d0d02584c0fc9026888022a4af8069ebb38f43b8e942e1dc70269.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 246KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE