Behavioral task
behavioral1
Sample
034cb0d852514cf2f2361a58139d57c1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
034cb0d852514cf2f2361a58139d57c1.exe
Resource
win10v2004-20231215-en
General
-
Target
034cb0d852514cf2f2361a58139d57c1
-
Size
286KB
-
MD5
034cb0d852514cf2f2361a58139d57c1
-
SHA1
2eb9da6e9ff6e6e721a461fe7430c859d2ba2655
-
SHA256
3d0e22e6636ada7592cf830e10b94397d9c1fc935eab8d621d593578b0270f55
-
SHA512
19c8ba3e608ef260858c22b8e9af54babdc258d20f5d272d346e36a2a2317b4d19f279246f0823bcb00b5bc1cb0516024f4e9aed7dd1d498ebcdc91133526983
-
SSDEEP
6144:uJkgOygi6SuWK86sIcw1Ni+Fg8oLzES1nxqPV6JI0a:wkgOqtK8Tnw2p8oXpxqcx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034cb0d852514cf2f2361a58139d57c1
Files
-
034cb0d852514cf2f2361a58139d57c1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE