Behavioral task
behavioral1
Sample
5f4a286eabbbc870aa8d386de827b9e5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5f4a286eabbbc870aa8d386de827b9e5.exe
Resource
win10v2004-20231215-en
General
-
Target
5f4a286eabbbc870aa8d386de827b9e5
-
Size
137KB
-
MD5
5f4a286eabbbc870aa8d386de827b9e5
-
SHA1
77656ac6f700efa990204081e883fb1f1bfe4104
-
SHA256
ad403b14449003d6be96968b3354496300537380b4cdf65d5fc1b4a9be9e46c1
-
SHA512
4482be8a287219c55ef5de2c09cf2edf3d01c96ec8efac6214362771625fd5f4ff1e8cb90dd3d88e9c9ca940046c32f54df0666594726872705ddf694158a0e5
-
SSDEEP
3072:s07weeEig/T+qxoZTAaDnj+YV0Awhe7ogjn/Wkre33f7:s07INg/STLTj+fPw7ogjn/WkK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f4a286eabbbc870aa8d386de827b9e5
Files
-
5f4a286eabbbc870aa8d386de827b9e5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 130KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE