Behavioral task
behavioral1
Sample
3ecf86811d41066840c4f802294dd51b3d41e780c3dc3bfba8aad4a1f52de18a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3ecf86811d41066840c4f802294dd51b3d41e780c3dc3bfba8aad4a1f52de18a.exe
Resource
win10v2004-20230915-en
General
-
Target
3ecf86811d41066840c4f802294dd51b3d41e780c3dc3bfba8aad4a1f52de18a
-
Size
8.5MB
-
MD5
dc0c6e752ce6ba90fa8398cf25ba0398
-
SHA1
484718dd3426277b468c3f5c7ebb496842903323
-
SHA256
3ecf86811d41066840c4f802294dd51b3d41e780c3dc3bfba8aad4a1f52de18a
-
SHA512
ccafd8977508c3e32c8f44abe03b2bed5e3239b22ebc74da12d5f338acdd7156a2d49dec36f3b89a512e9eb0535139e52fbc712da0f9453146fd58c9067c8f79
-
SSDEEP
196608:1TqjkWTa4deBeLQ/p+Y2mhO5SHu5Gj28pfMuA+Vuh+llVsM:1TONTGhBamQcO5j8pfMuALE
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ecf86811d41066840c4f802294dd51b3d41e780c3dc3bfba8aad4a1f52de18a
Files
-
3ecf86811d41066840c4f802294dd51b3d41e780c3dc3bfba8aad4a1f52de18a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 566KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 70KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7.9MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 24KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.giats Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE