Behavioral task
behavioral1
Sample
135cc405e2de5750136063fbe4475fdd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
135cc405e2de5750136063fbe4475fdd.exe
Resource
win10v2004-20231215-en
General
-
Target
135cc405e2de5750136063fbe4475fdd
-
Size
756KB
-
MD5
135cc405e2de5750136063fbe4475fdd
-
SHA1
8f468c1e7bbe63e409d9f1ddd1d632033cfe5715
-
SHA256
6f78c32c29ca3180c4d1a600384b02c04acb760d191ad60a0e13f377582a3505
-
SHA512
7255f31976e75086233f225630fd776583097809179a4359325183ec2a7893db902c021d06dc83e4c6560a36affe2cf039bc4f21b13f882bed44e09e6ecf16d5
-
SSDEEP
6144:sIEinuVki/usCQcKPCnYflQlbFJEQGnhRznJ/LHOCVT9bYaxURCf34:sJv//uHQcNYfuRFJgnVCCVtYaxUREI
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 135cc405e2de5750136063fbe4475fdd
Files
-
135cc405e2de5750136063fbe4475fdd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
..... Size: 216KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
...... Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..... Size: 3KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
....... Size: 519KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
...... Size: 16KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE