Behavioral task
behavioral1
Sample
84239dd4a551688bd720f8bdd789f5da.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
84239dd4a551688bd720f8bdd789f5da.exe
Resource
win10v2004-20231222-en
General
-
Target
84239dd4a551688bd720f8bdd789f5da
-
Size
1.5MB
-
MD5
84239dd4a551688bd720f8bdd789f5da
-
SHA1
d05d2b28c3d1b4473bd1ec3ac8cbe088e16cc17a
-
SHA256
d6a2bbc38f95bf67a56cf93a8e5b871731d589971dee8fa2302c37ea9215a88e
-
SHA512
02cefd1a1693d98ca5a4fb658f3fe790eec66ab6461f9d6ff8f1f08be1908773a197a20fbad4dc72b9a0e1c4c5001020a38875129309141f309ca03368ae30ea
-
SSDEEP
24576:MSyK2KgdhMXiZJ+Qwz/MRcQHFBs9bg1kXOum2uUv/yv4VzO1okdwSYFcuOa46VFH:l2KgdHLwz/MCA+a1kXTuo/y4OTGzF8lP
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84239dd4a551688bd720f8bdd789f5da
Files
-
84239dd4a551688bd720f8bdd789f5da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE