Behavioral task
behavioral1
Sample
1695e454c77034f21dbc39fa51fdf5c09cf175a06b5687220544b84f3e60067a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1695e454c77034f21dbc39fa51fdf5c09cf175a06b5687220544b84f3e60067a.exe
Resource
win10v2004-20231023-en
General
-
Target
1695e454c77034f21dbc39fa51fdf5c09cf175a06b5687220544b84f3e60067a
-
Size
26KB
-
MD5
008099a0319a150e7a955e7cc083e658
-
SHA1
26e45896241f53378fba9bdd336c8e780a7fe7b4
-
SHA256
1695e454c77034f21dbc39fa51fdf5c09cf175a06b5687220544b84f3e60067a
-
SHA512
942308e39375bfbbd0f066ae5aa583dcfff7fc37fd8999a408578cab14dd1025446fdc05162ad2b0d8759f1a81fed03cd43fc83b9a3619000904344024a5dc88
-
SSDEEP
768:WvoqzEF033S6imw0vbeiuTXlWNGrx1Lfb:WXzE6Wmw0zeF5WN+
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1695e454c77034f21dbc39fa51fdf5c09cf175a06b5687220544b84f3e60067a
Files
-
1695e454c77034f21dbc39fa51fdf5c09cf175a06b5687220544b84f3e60067a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE