Behavioral task
behavioral1
Sample
1dfe325b8645f36e6ed7b91ea9c35ae5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1dfe325b8645f36e6ed7b91ea9c35ae5.exe
Resource
win10v2004-20231222-en
General
-
Target
1dfe325b8645f36e6ed7b91ea9c35ae5
-
Size
191KB
-
MD5
1dfe325b8645f36e6ed7b91ea9c35ae5
-
SHA1
9a805b74a59342141006caddc647d80de44acaca
-
SHA256
8181b783a9eaf7556af0b2052ebc96a027026f6f3c51e8c9af76fa99c92c689f
-
SHA512
410f85cd8e27f9527f9a5a5298a9a6a03f789dc824ec6b992425b332c34875946d5613f6f891516ab5346a82e9bcc93970ca0479dfab36bc9ec6b472172b1df2
-
SSDEEP
3072:I9Y+iLxwQH7HxoGHmyGLG50eztcoe1CRLn2zGB8E2ewKUUCSodeJi7GT7fC:ddvuNyGm0eRmCn2KB5wKfCSodeJiCu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dfe325b8645f36e6ed7b91ea9c35ae5
Files
-
1dfe325b8645f36e6ed7b91ea9c35ae5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 155KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE