Behavioral task
behavioral1
Sample
0a95f1c120c9413bea9accdcb6b17ebc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a95f1c120c9413bea9accdcb6b17ebc.exe
Resource
win10v2004-20231215-en
General
-
Target
0a95f1c120c9413bea9accdcb6b17ebc
-
Size
42KB
-
MD5
0a95f1c120c9413bea9accdcb6b17ebc
-
SHA1
650871278942dc5ebd4cee64ec68685363909317
-
SHA256
42a03cf33d0c21bdfb32742e20dbe0b3d754d5ee50fb4df75d6546fb754bcbe7
-
SHA512
db9a3c9e0619bf414f02b955c7c4f19c1dd853bfd4edd474bedd428f1bc94020fe1712b74a3dcca3b973041589ae128302af7a97ae9052dd17d675a075a3d6a1
-
SSDEEP
768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888a:BzOCay4wV339rPjzbpLwRJ9pSdoIz
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a95f1c120c9413bea9accdcb6b17ebc
Files
-
0a95f1c120c9413bea9accdcb6b17ebc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE