Behavioral task
behavioral1
Sample
ba7609bc99ade96f391921ee074b81ae3b8661969a1e69c04709bb19568d7769.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ba7609bc99ade96f391921ee074b81ae3b8661969a1e69c04709bb19568d7769.exe
Resource
win10v2004-20230915-en
General
-
Target
ba7609bc99ade96f391921ee074b81ae3b8661969a1e69c04709bb19568d7769
-
Size
555KB
-
MD5
01504f39c8f1eb5c63f09c5be9f121a9
-
SHA1
57bf29ce7bd5b0498dba9024b6bc14a93403b421
-
SHA256
ba7609bc99ade96f391921ee074b81ae3b8661969a1e69c04709bb19568d7769
-
SHA512
0354cac839dd6e79bae5fd347c9e75e7c2e5308543b4d052fc837f30db6e25c8022d488cba5fad1ead88fcdd9d1c7bd21cfeb6ee244683302dbb467d44f1b269
-
SSDEEP
6144:/VOXpmWT8sq+R88nNcv8qmGH18cuUqg3fJ8Aab0JyvnHnNBODP7jLxsCw/CV9hV/:/MZmY8sqWbc+yNXqwJBrgHzOPjJhV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba7609bc99ade96f391921ee074b81ae3b8661969a1e69c04709bb19568d7769
Files
-
ba7609bc99ade96f391921ee074b81ae3b8661969a1e69c04709bb19568d7769.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 337KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE