Behavioral task
behavioral1
Sample
24af7f2015c0c6e5c491a2984c97c1883518a0643097e5c0d0689c253a160d66.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
24af7f2015c0c6e5c491a2984c97c1883518a0643097e5c0d0689c253a160d66.exe
Resource
win10v2004-20231023-en
General
-
Target
24af7f2015c0c6e5c491a2984c97c1883518a0643097e5c0d0689c253a160d66
-
Size
3.6MB
-
MD5
d18df1e8e42418cc2f8166e8b3fc8aef
-
SHA1
5e7e18bab0668e62d9bb62b3bdc0a31de36b568a
-
SHA256
24af7f2015c0c6e5c491a2984c97c1883518a0643097e5c0d0689c253a160d66
-
SHA512
e5c2db7a6f627c51da17390c7328cb4967d5a5e4f92702915be13230708d8c6eba160637a4207679442021ddc30f9091827b6fa3806cb57948d2303193868d9a
-
SSDEEP
98304:KE/TyBKIhGDrHmpl0Xx8M4nWeLc4OUZgH:77yL4nGpCXxsnLXlZgH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24af7f2015c0c6e5c491a2984c97c1883518a0643097e5c0d0689c253a160d66
Files
-
24af7f2015c0c6e5c491a2984c97c1883518a0643097e5c0d0689c253a160d66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 535KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.8MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE