Behavioral task
behavioral1
Sample
86a13a1fe146b1f3db0c0b84fa5ad4c8dbd638dd7dd2b7dba7cac4775d19af8f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86a13a1fe146b1f3db0c0b84fa5ad4c8dbd638dd7dd2b7dba7cac4775d19af8f.exe
Resource
win10v2004-20231222-en
General
-
Target
86a13a1fe146b1f3db0c0b84fa5ad4c8dbd638dd7dd2b7dba7cac4775d19af8f.exe.zip
-
Size
2.7MB
-
MD5
c0e73ca769b6f6600b8ba2d5e1d017c7
-
SHA1
ad94b4928192248b3dcb80eefe883ddb86b52849
-
SHA256
adba24dff76a28c50d064221803b89150ad2216e1fe9d7fcc00aedf6a0e9d060
-
SHA512
8b4e242c351160c415442280eb10bfab0b3b3dcbada6ca958f3ac3e97338079c30db3b73d9381048075e3ab77cf4bc494bc51e6dfb9acb0ffc25259469d5e647
-
SSDEEP
49152:a3pF1uxGdizB6LQcBvEKzqf3iBrGYO5AXWlqQlmaM01OEdCoKhRkLlC:a3lRdpBhzq/iBjO5iWlDlM0So3lC
Malware Config
Signatures
-
resource yara_rule static1/unpack001/86a13a1fe146b1f3db0c0b84fa5ad4c8dbd638dd7dd2b7dba7cac4775d19af8f.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/86a13a1fe146b1f3db0c0b84fa5ad4c8dbd638dd7dd2b7dba7cac4775d19af8f.exe
Files
-
86a13a1fe146b1f3db0c0b84fa5ad4c8dbd638dd7dd2b7dba7cac4775d19af8f.exe.zip.zip
Password: infected
-
86a13a1fe146b1f3db0c0b84fa5ad4c8dbd638dd7dd2b7dba7cac4775d19af8f.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 88KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE