Static task
static1
Behavioral task
behavioral1
Sample
Astral-GenV3.exe
Resource
win10v2004-20231222-en
General
-
Target
Astral-GenV3.exe
-
Size
32.8MB
-
MD5
9fe78916c42a98044799bc70debf45a6
-
SHA1
b5d982e57ec261b15ff41e7ad172cb2ae018af62
-
SHA256
e6f13b69d9d38f4eb8853c624bcd899bdfccc09c1085af2eb2e566e3101f78dc
-
SHA512
d7fdb1bc9cb3c4853440851d9e3c9236c2af09b9141a48a0c3e8f07ef2fb47bb114d739584fe12c9d49d2001015d320200561b4dd627be68c0d4eac3d3960d15
-
SSDEEP
786432:XbHRXIrMdPEagIZS9G85CW52AcwIr8Fu9E26I18MqHnY8rbiFPR:LHRXldPbgIZo5ktFe2V8Mds8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Astral-GenV3.exe
Files
-
Astral-GenV3.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32.7MB - Virtual size: 32.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ