Behavioral task
behavioral1
Sample
00e1980b15811b952a530a27cb6e20de.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00e1980b15811b952a530a27cb6e20de.exe
Resource
win10v2004-20231222-en
General
-
Target
00e1980b15811b952a530a27cb6e20de
-
Size
33KB
-
MD5
00e1980b15811b952a530a27cb6e20de
-
SHA1
ac05bd5eba401a9b3b9fb5818e0b3c888ff2d6b8
-
SHA256
38652a72091e57d60f19b84384c80e7330a35133fa878d2b2162092adff25519
-
SHA512
01a64bb2ece11906782c27d21e32ee98a5697598824c99daf0432428bf62a6d4d55b9eed5c33bec8fc2473eda0e01085dc1e41b1ff643457d7059a0f8a485c30
-
SSDEEP
768:tB8i3U/6wRFVcUkhPedNIhvHGJiJCjeyh1l8WM9N4xrha5:tBVy6wnVcUkhP+IXuphP8590
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00e1980b15811b952a530a27cb6e20de
Files
-
00e1980b15811b952a530a27cb6e20de.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE