Behavioral task
behavioral1
Sample
05f46642c518f8b98d79b455ed5576f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05f46642c518f8b98d79b455ed5576f9.exe
Resource
win10v2004-20231215-en
General
-
Target
05f46642c518f8b98d79b455ed5576f9
-
Size
190KB
-
MD5
05f46642c518f8b98d79b455ed5576f9
-
SHA1
ddcf203d6ddd34b046d1e4b9164d9b71f0f3facf
-
SHA256
7e8f7d0cc004ca92549ea0dadff1d0c93bde6fcd0df21eb8b554f181102b8dda
-
SHA512
f7ff6cea5470a2549c25e3a9458da5f30f38ea2151beec079d337b0a438c33a2fca48b0b0d3e43dd72a9dabdc1ce0fa5ab1920799c6c4c85a0a56286e5e18a2a
-
SSDEEP
3072:vDYDL59saUCkYD76dz3mirI1IgrRyl1ga/VKRbLTabOaNNsLWWKL5n2h5zqGL9l3:cDLvstgyzWig3yl1ga/Aa6pTKNetqGX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f46642c518f8b98d79b455ed5576f9
Files
-
05f46642c518f8b98d79b455ed5576f9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 165KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE