Behavioral task
behavioral1
Sample
a81ef1662bdd881d5b7857376fc0d496cf75c2e57f2b1f523062f3ab82d726e1.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
a81ef1662bdd881d5b7857376fc0d496cf75c2e57f2b1f523062f3ab82d726e1.exe
Resource
win10v2004-20231127-en
General
-
Target
a81ef1662bdd881d5b7857376fc0d496cf75c2e57f2b1f523062f3ab82d726e1
-
Size
3.6MB
-
MD5
364d6c77bdca1c54ef17521020be6ef6
-
SHA1
1e24da08804c054c32ed57e07718295e4580df8d
-
SHA256
a81ef1662bdd881d5b7857376fc0d496cf75c2e57f2b1f523062f3ab82d726e1
-
SHA512
b0151648b8bcd50b4c65e669f4a4fa1862ad05c5db602740ed6765ce6fdeafde84bf199a8a8b1f69cccbf9104b2974ef1d953883d1a8c07bbcba9a8b8aa9f53c
-
SSDEEP
98304:8Gpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:wekwdeyLXdIyzdM
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a81ef1662bdd881d5b7857376fc0d496cf75c2e57f2b1f523062f3ab82d726e1
Files
-
a81ef1662bdd881d5b7857376fc0d496cf75c2e57f2b1f523062f3ab82d726e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.6MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE