Behavioral task
behavioral1
Sample
0bcdf93298e9c38ba09cbd427da1f418.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bcdf93298e9c38ba09cbd427da1f418.exe
Resource
win10v2004-20231215-en
General
-
Target
0bcdf93298e9c38ba09cbd427da1f418
-
Size
65KB
-
MD5
0bcdf93298e9c38ba09cbd427da1f418
-
SHA1
9375ba6cf5083c1feeb606c93acc9bf4577532c6
-
SHA256
81d4dd4ab69d60db8bccbcbb2c80dd131661a50de73c3896a47c3ab1d945276d
-
SHA512
3226a4f993a47f9601d68dd79cfd28771499aa19d738525fa925be3b394778ae744fa6c6790aa7b19be17a032e403d8affc37ba56390bf3bb48f8bb73b89fb6a
-
SSDEEP
1536:lygVG1e7NYHkR0XRuWLfgnBYRKYdFYFlF9hFvXj:XVMIUkGXVUnBqKYdy/F9htj
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bcdf93298e9c38ba09cbd427da1f418
Files
-
0bcdf93298e9c38ba09cbd427da1f418.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE