Behavioral task
behavioral1
Sample
22304d15db4cb825eaf2a81e1c1e43e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22304d15db4cb825eaf2a81e1c1e43e8.exe
Resource
win10v2004-20231222-en
General
-
Target
22304d15db4cb825eaf2a81e1c1e43e8
-
Size
1.6MB
-
MD5
22304d15db4cb825eaf2a81e1c1e43e8
-
SHA1
de02bc12c863cba561a61be4ea362ae180578d31
-
SHA256
45bf8faab0b74290ed54f4961cd43b7272898ed979f3bcc4dfcf75eff5039031
-
SHA512
06293626950924dfecb06a57478509a539344be08d6eee37c6f0c616a09e5d28d77ed88d94123d60b9786b5a9d9df4265bec30954533c4c3a3dc6e64195f1350
-
SSDEEP
49152:knl4PCjMMPnIxFQEdXNGL1d6raKbnbyX:24UMMAxFQIdGLIaeb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22304d15db4cb825eaf2a81e1c1e43e8
Files
-
22304d15db4cb825eaf2a81e1c1e43e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 275KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE