Behavioral task
behavioral1
Sample
47b51c33e7a377cd7c9c33410985a358f29e9d98d6a7e3c943c1eddc99ec29f6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
47b51c33e7a377cd7c9c33410985a358f29e9d98d6a7e3c943c1eddc99ec29f6.exe
Resource
win10v2004-20230831-en
General
-
Target
47b51c33e7a377cd7c9c33410985a358f29e9d98d6a7e3c943c1eddc99ec29f6
-
Size
304KB
-
MD5
e3bd5fde7e518159e9af2c6e2f8b482f
-
SHA1
6950a49753bf2c1e699fab74e39d590f6b7a73f4
-
SHA256
47b51c33e7a377cd7c9c33410985a358f29e9d98d6a7e3c943c1eddc99ec29f6
-
SHA512
1a52ff7b4d55dbb4d0875270c0ecd9f596d9a6424d3e944a54670a4934f68e928a8468dd13555907b41c0c1cd5b794adccd8bb0b9e31dd0601bcdfa25e0f49cb
-
SSDEEP
6144:SIgWxfi6TxlsaMDCp/hxo6b56BTAQiPWe7x6NZLWEyPg:lgWdrFlsWlN56BXiPWu6NlWEyPg
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47b51c33e7a377cd7c9c33410985a358f29e9d98d6a7e3c943c1eddc99ec29f6
Files
-
47b51c33e7a377cd7c9c33410985a358f29e9d98d6a7e3c943c1eddc99ec29f6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 303KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE