Behavioral task
behavioral1
Sample
924359c051e3b1104dfbefbc8dd59ec70dee3e44e87bb81a8d93bfc54d0dc931.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
924359c051e3b1104dfbefbc8dd59ec70dee3e44e87bb81a8d93bfc54d0dc931.exe
Resource
win10v2004-20230915-en
General
-
Target
924359c051e3b1104dfbefbc8dd59ec70dee3e44e87bb81a8d93bfc54d0dc931
-
Size
528KB
-
MD5
2f734cff4e3ecda173d4e1f290ae32f7
-
SHA1
181e7094f97edd837e98cb0b73785895bb6c18d4
-
SHA256
924359c051e3b1104dfbefbc8dd59ec70dee3e44e87bb81a8d93bfc54d0dc931
-
SHA512
d09d8505ce53d4c4870730fc82fcc48cc21aaf067cf1da18b39b5a51484ba50bfb2f44c4af869d85d8f10aa18aa10c9e08fd927a5935528237ea7374271c6e36
-
SSDEEP
12288:4nvBaTYWqZnDEWEY2oA381UDZXWvT9vY/EE0WNgcHmkxHyI:6kRqZDTx2P81UDtGA/E3S8kxHyI
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 924359c051e3b1104dfbefbc8dd59ec70dee3e44e87bb81a8d93bfc54d0dc931
Files
-
924359c051e3b1104dfbefbc8dd59ec70dee3e44e87bb81a8d93bfc54d0dc931.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 231KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE