Behavioral task
behavioral1
Sample
a39376312d90b8d948eb1190371a3010561c4020bfb2c5c16e892b8c8ba2fccb.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a39376312d90b8d948eb1190371a3010561c4020bfb2c5c16e892b8c8ba2fccb.exe
Resource
win10v2004-20231020-en
General
-
Target
a39376312d90b8d948eb1190371a3010561c4020bfb2c5c16e892b8c8ba2fccb
-
Size
812KB
-
MD5
8de24fbd2b2ece72303341bf3e69047c
-
SHA1
3b52812810ae70462a299bba3dc7c6312a54a1ec
-
SHA256
a39376312d90b8d948eb1190371a3010561c4020bfb2c5c16e892b8c8ba2fccb
-
SHA512
1413f14de257e59a6d673253ceacb093a6ab519b891c183a8d5cba6689befae5b601533425a3cd8f69c02af89a37e18ef33058c3520870d7b6f6c3851203fcdf
-
SSDEEP
12288:Esi7Hvgar9Hc4YHNJDWXWGT25OmHGQzB2i0VBMdVOso6sD/jRbxyR5gWF5Iy:Fi4cUHNJBGTVHeZ0HMeD/j9xyR53F6
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a39376312d90b8d948eb1190371a3010561c4020bfb2c5c16e892b8c8ba2fccb
Files
-
a39376312d90b8d948eb1190371a3010561c4020bfb2c5c16e892b8c8ba2fccb.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 339KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 250KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE