Behavioral task
behavioral1
Sample
42c2613794cdeb7f4541c02db414255c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42c2613794cdeb7f4541c02db414255c.exe
Resource
win10v2004-20231215-en
General
-
Target
42c2613794cdeb7f4541c02db414255c
-
Size
21KB
-
MD5
42c2613794cdeb7f4541c02db414255c
-
SHA1
d812e5432e230844f6c9b33662e18ba522fb0c90
-
SHA256
a04df71bc193fd3d512934afd99215656231e40969194079667c8c47d0e5bd45
-
SHA512
75998460bcd52ae5a64a7772b376af35bfee2c26a049f875cf3130c69dce52784eaaff6e3bfe21dddd3b7496b575487e8e84d50ebf9910b4366229f255804a8c
-
SSDEEP
384:BM5PJYih5V7WYgI/qpYreFEuQw2Ud89zAxwr6+S9Pfu7n5:e5lUYZ/gPQw2dex3deV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42c2613794cdeb7f4541c02db414255c
Files
-
42c2613794cdeb7f4541c02db414255c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
-BLTEAM- Size: 15KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE