Behavioral task
behavioral1
Sample
62147c175ba60af97f308d22044081a6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
62147c175ba60af97f308d22044081a6.exe
Resource
win10v2004-20231215-en
General
-
Target
62147c175ba60af97f308d22044081a6
-
Size
34KB
-
MD5
62147c175ba60af97f308d22044081a6
-
SHA1
88ec332a234ef2d06f8a21e9534ceca4ab2cd125
-
SHA256
75e1e3ec3f8b43ace08a8e2ba8b6995e0253542e7b535332d0bf9251e8e2ec8b
-
SHA512
f8547429daca8eb4e4340fb88082272fac324145bce992d51fddeb4b1c6853e30d284dfa6923740ad377a58b4e3ecdfc1bcbda59fb3b6d54421f50c9d7c848c5
-
SSDEEP
768:LzUnVDLmZ7dP6tHmxIYV9B6E0AWDTfHuwxCdeV:PsV3mxditHmxxToHfu1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62147c175ba60af97f308d22044081a6
Files
-
62147c175ba60af97f308d22044081a6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
bdfr Size: 4080.0MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mftf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
agr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ibfrd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jtf Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rstrf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdngf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raer Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.anyfd Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA