Behavioral task
behavioral1
Sample
000bbeffbba9768ba3d3d7cfaee80033.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
000bbeffbba9768ba3d3d7cfaee80033.exe
Resource
win10v2004-20231215-en
General
-
Target
000bbeffbba9768ba3d3d7cfaee80033
-
Size
27KB
-
MD5
000bbeffbba9768ba3d3d7cfaee80033
-
SHA1
8083a057e2b3f2ea8c55c68c817f2046881b4f04
-
SHA256
862620721c7b3cf17d8e88539994c0c66a7e87a6f9c0216b7d1192fc93dade19
-
SHA512
8a39ad292370908e129a1b064a86f2038720776e20cfa1b9b6e374968159b80190bc756f6d5c26d0ace31d57d0ee93152937014c440cf1f33af62396fe1041b6
-
SSDEEP
768:MVIJJ+boRxuLxi0w0JuFaShqKxZha5m5wN:6eJbR0s0Lw7hpZ5wN
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 000bbeffbba9768ba3d3d7cfaee80033
Files
-
000bbeffbba9768ba3d3d7cfaee80033.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE