Behavioral task
behavioral1
Sample
10746d73049dd8c343cba669e3d9b16e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10746d73049dd8c343cba669e3d9b16e.exe
Resource
win10v2004-20231215-en
General
-
Target
10746d73049dd8c343cba669e3d9b16e
-
Size
139KB
-
MD5
10746d73049dd8c343cba669e3d9b16e
-
SHA1
4dd792bf286c487e9a22f1022556534b520032cf
-
SHA256
3fdc95763a924fc20874d8cdde68df6df954633499c01464f5173f1897b58f17
-
SHA512
466c8dd5e5833216160fbd007f037fd56ff1f1ebed5b95eb6995694bcdbc6bc58dccbf45f98b613618dcf8275fa1676ca7dc37546b97b8de2ef0e01d5e9ef34e
-
SSDEEP
3072:53INQS8kYsuRvX1OCfLpFcTyx0euQRTKNBX9:531QYsa4CTWylPTKNt9
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10746d73049dd8c343cba669e3d9b16e
Files
-
10746d73049dd8c343cba669e3d9b16e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 87KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE