Behavioral task
behavioral1
Sample
774f54897f2525e3592cdd743c00e06ad18ed2358c13760559a926826c7207ec.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
774f54897f2525e3592cdd743c00e06ad18ed2358c13760559a926826c7207ec.exe
Resource
win10v2004-20230915-en
General
-
Target
774f54897f2525e3592cdd743c00e06ad18ed2358c13760559a926826c7207ec
-
Size
1.0MB
-
MD5
2a8ddb3e6d504964f48eb396562a44b8
-
SHA1
75b17ae9c7fbf3d1f1cab8d9b362de2041e0832d
-
SHA256
774f54897f2525e3592cdd743c00e06ad18ed2358c13760559a926826c7207ec
-
SHA512
52da62ed2f17369048ba26f1419e08a7a40559c5cb99269013ab0c8429ff132123fa2b288f012348c97ddb176815f75bc54d1f8c7c4913bd68bcd7719c9dd8b6
-
SSDEEP
24576:pLibKuQj7kUMicg80lX2XAYvsoSWTfhvaedVbbSyQ:RibIDcg80lX07RS1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 774f54897f2525e3592cdd743c00e06ad18ed2358c13760559a926826c7207ec
Files
-
774f54897f2525e3592cdd743c00e06ad18ed2358c13760559a926826c7207ec.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 192KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 157KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 547KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE