Behavioral task
behavioral1
Sample
78892dedc1fb8a900c672004437caa24185955f5320cbe69ff5e2d6d507bf57a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
78892dedc1fb8a900c672004437caa24185955f5320cbe69ff5e2d6d507bf57a.exe
Resource
win10v2004-20230915-en
General
-
Target
78892dedc1fb8a900c672004437caa24185955f5320cbe69ff5e2d6d507bf57a
-
Size
6.2MB
-
MD5
d835daf298f172b7c773cd25ba7748e2
-
SHA1
31d181b2d7ae5b39a8faafd628003d0279d59fd7
-
SHA256
78892dedc1fb8a900c672004437caa24185955f5320cbe69ff5e2d6d507bf57a
-
SHA512
1028fdd389f99191d78f2c71c00bfe3d05754bdf4361071bf6792707ad21c27e2e58988236a01045270928875d02ec312ef4f5341bffe1307d65d7bebca515da
-
SSDEEP
98304:I4aTBjloaPk+Lj2kqtPerkCtGIy9crsxCUlGbicVx7hUmsZImtpoR:I4aTp2aP3RqtPykCt09cQubR7uJmC
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78892dedc1fb8a900c672004437caa24185955f5320cbe69ff5e2d6d507bf57a
Files
-
78892dedc1fb8a900c672004437caa24185955f5320cbe69ff5e2d6d507bf57a.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
cdsK@O#i Size: 543KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YA5FP/_ Size: 4.9MB - Virtual size: 17.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C"9%sE'a Size: 44KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G^N2cBp, Size: 2KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g,\f*O.1 Size: 303KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ithel Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE