Behavioral task
behavioral1
Sample
19aa5d21bd64dcfaad0e7d695180d29f94be45869085d8626041dc61f7227195.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
19aa5d21bd64dcfaad0e7d695180d29f94be45869085d8626041dc61f7227195.exe
Resource
win10v2004-20230703-en
General
-
Target
19aa5d21bd64dcfaad0e7d695180d29f94be45869085d8626041dc61f7227195
-
Size
1.4MB
-
MD5
e19648e4f79176b1a3d0abee4de1e46a
-
SHA1
b098527785ec91d8b44810bcdc84bf5336a72e7a
-
SHA256
19aa5d21bd64dcfaad0e7d695180d29f94be45869085d8626041dc61f7227195
-
SHA512
371e0a7a527dcf53d2e3e715e9c8f367ac9f1c86b48f04921a7f751324bc9ebec2039e8a3491e3fbb5712aa07c4384fadb1d1fd9638426e6425a966f73a308c0
-
SSDEEP
24576:TNpHdnI/7dPL+VckN3gZu129+bHiYDJ6E8EDhif+DnygCRtSKcXXMBTN+53Xh:7Hda7deckN3gUAiHiG68DhifinIHWXXZ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19aa5d21bd64dcfaad0e7d695180d29f94be45869085d8626041dc61f7227195
Files
-
19aa5d21bd64dcfaad0e7d695180d29f94be45869085d8626041dc61f7227195.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 237KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.1MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE