Behavioral task
behavioral1
Sample
1b94e209da7ff7c10c98e9e0810088d2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b94e209da7ff7c10c98e9e0810088d2.exe
Resource
win10v2004-20231215-en
General
-
Target
1b94e209da7ff7c10c98e9e0810088d2
-
Size
77KB
-
MD5
1b94e209da7ff7c10c98e9e0810088d2
-
SHA1
9fafb1f3643cee9409a6f6e16975b34d0cbab2cd
-
SHA256
0a9d0babce4a44b3c67e4bd75a9ebbf6615247526c9d7f3e6a7eb159967db31d
-
SHA512
1f8315bd9370e0a784deec304c87e0a1b1e4c23bbe7d580ca2c4a4150cf57014b60ac1fe4c1cc8a050d45d0f90fd3a778115d55001304b617690526e1d1c86da
-
SSDEEP
768:3J8UUp6OrhvG1m51N228HprR3kmcaEAy4A5ZrdgHsYp/+PnHhjDWqss97stGkD8I:3i8Ow+R2pr9TOZex+PBH7s5uzq5u
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b94e209da7ff7c10c98e9e0810088d2
Files
-
1b94e209da7ff7c10c98e9e0810088d2.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 24KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE