Behavioral task
behavioral1
Sample
1eb624b5b9d1a1fa983bfb2757b44e7a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1eb624b5b9d1a1fa983bfb2757b44e7a.exe
Resource
win10v2004-20231215-en
General
-
Target
1eb624b5b9d1a1fa983bfb2757b44e7a
-
Size
102KB
-
MD5
1eb624b5b9d1a1fa983bfb2757b44e7a
-
SHA1
4845bf3fcef82a2f6103eaa9a1d1d2a46de78d69
-
SHA256
d47ddfc484e1f844b954a019662d2e0f150c2bf3b87fe76cd5aff091a799bb10
-
SHA512
6d978c2e0b8919debf70932955d315c70362946ad6a871c4371a82c7e6f3979e9ab0eaf7ed497d1a14c4666c6c7d025449c047a1890eaa9092cb73ca1fa47a25
-
SSDEEP
3072:qVIf2sZE1T2GADAIATVA6pTcvsiEu3nMTnFb71:5TE1ajuVA6i+6UVJ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eb624b5b9d1a1fa983bfb2757b44e7a
Files
-
1eb624b5b9d1a1fa983bfb2757b44e7a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE