Behavioral task
behavioral1
Sample
e6694c8c390abf0d152da0345987827f9cdbc0a7c9e0075736c7dfed933520b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e6694c8c390abf0d152da0345987827f9cdbc0a7c9e0075736c7dfed933520b0.exe
Resource
win10v2004-20230915-en
General
-
Target
e6694c8c390abf0d152da0345987827f9cdbc0a7c9e0075736c7dfed933520b0
-
Size
12.8MB
-
MD5
78bb1b5c180fa93f8a10200003d79d09
-
SHA1
8f6b53cd8c1c87cd0403cb3bb09cfbea227fe28f
-
SHA256
e6694c8c390abf0d152da0345987827f9cdbc0a7c9e0075736c7dfed933520b0
-
SHA512
c94b207f6b4c095c403f538913bfd33456083cc7055a01e21a43eb17928dbcd3a0209fa00e36313fd8a61b4805bea1ababed38819ac05d0197e37075d093b144
-
SSDEEP
393216:hECIBG4Q5+LTU9pdZuzva+MfIZAV007bJPbeymKmvsz:3Io7oLTGJiaf71zdSE
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6694c8c390abf0d152da0345987827f9cdbc0a7c9e0075736c7dfed933520b0
Files
-
e6694c8c390abf0d152da0345987827f9cdbc0a7c9e0075736c7dfed933520b0.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 758KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12.0MB - Virtual size: 34.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE