Behavioral task
behavioral1
Sample
0969ced438a84918b02c295d37cc4057.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0969ced438a84918b02c295d37cc4057.exe
Resource
win10v2004-20231215-en
General
-
Target
0969ced438a84918b02c295d37cc4057
-
Size
24KB
-
MD5
0969ced438a84918b02c295d37cc4057
-
SHA1
0c36a37e714d95fea5f8f845bc95599446a38702
-
SHA256
54b5e8a87512852789a739d3e5390bf8d4871222d440224dbde3148b94735f0b
-
SHA512
5c2e078cae42b3635bd40f8c2f13288a947aae7649369c63621ef2f43ca1bd700331bf98246f98eca5f8a404309869a18bdcdbd74fa68fcc6e9e7d13f9e272c2
-
SSDEEP
384:s/0dzn60BZuFmJFd1A5G+W0CFd5d0h1+DqcJ2gcKxRI5AxXr6+e9Pfqbn1w:fdO0GmJFd1/3Xf0ujQ0xaqxWha5w
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0969ced438a84918b02c295d37cc4057
Files
-
0969ced438a84918b02c295d37cc4057.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE