Behavioral task
behavioral1
Sample
20fbadff5e79889cbf1e4b1eab2a13fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20fbadff5e79889cbf1e4b1eab2a13fa.exe
Resource
win10v2004-20231215-en
General
-
Target
20fbadff5e79889cbf1e4b1eab2a13fa
-
Size
33KB
-
MD5
20fbadff5e79889cbf1e4b1eab2a13fa
-
SHA1
9a7905f87b733b68a58766b04805db7c73c54a83
-
SHA256
298767d86be454202022bdcadce2ea326e9ba2226669288549773aba583ac894
-
SHA512
24c50ef873bc9d8b5851de9875d706c751293a475b50f5ca5db9a3020238d8b850cf5e37e125f7309d343a4c2bff68c33125a3f54fea9f2d026499d21527d87c
-
SSDEEP
768:O3gSCVOIpdo4DrBlSDGFN5NFmxCLuprqvTjM4:E2o4hQGBNFmxCLucjM4
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20fbadff5e79889cbf1e4b1eab2a13fa
Files
-
20fbadff5e79889cbf1e4b1eab2a13fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 32KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE