Behavioral task
behavioral1
Sample
4245efe881dc4ab175a09d7c80da100dcec71c2a86c1416928d5555ec58176d1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4245efe881dc4ab175a09d7c80da100dcec71c2a86c1416928d5555ec58176d1.exe
Resource
win10v2004-20230915-en
General
-
Target
4245efe881dc4ab175a09d7c80da100dcec71c2a86c1416928d5555ec58176d1.exe.zip
-
Size
4.7MB
-
MD5
c2e29e9030a915d47690d8804b7313eb
-
SHA1
06c7c76b2f521ce108511308c7195da43ecb8263
-
SHA256
9e5d458e8158cf627952a0dbd224b2dfe20ae0a95af4e0cc4aad6994ffb127e7
-
SHA512
f37f96109a040a8f02d8bf891b8c677cc7992365884288d8d5899e526896f829569354fd57bdac187cdf04bb8d76328cec05f6a3e598ce5fd319acd329b43309
-
SSDEEP
98304:XuKonAMn7uI61SOF0Pl9MWQUCoHmJHn3itgCYLCVWLhoy:eKoII6gOBfxoGJSV0hoy
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4245efe881dc4ab175a09d7c80da100dcec71c2a86c1416928d5555ec58176d1.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4245efe881dc4ab175a09d7c80da100dcec71c2a86c1416928d5555ec58176d1.exe
Files
-
4245efe881dc4ab175a09d7c80da100dcec71c2a86c1416928d5555ec58176d1.exe.zip.zip
Password: infected
-
4245efe881dc4ab175a09d7c80da100dcec71c2a86c1416928d5555ec58176d1.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 765KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.9MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 59KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE