Behavioral task
behavioral1
Sample
22a40f4a667234aef2c45cf227a95793.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22a40f4a667234aef2c45cf227a95793.exe
Resource
win10v2004-20231215-en
General
-
Target
22a40f4a667234aef2c45cf227a95793
-
Size
353KB
-
MD5
22a40f4a667234aef2c45cf227a95793
-
SHA1
440c2491a5bce561b4988829f76114f6152ca27e
-
SHA256
3436474b6b8dd47cc8735b923f4cb8c4c5d6a7b9c9be628c5661d4e094c18230
-
SHA512
86ae3a6644185a1318af906f92b2b569e39a9ccd049e2b9e158ecbc1607842c4279a0633b1b7b484c6376bc2a442d958306d92fa37cc74ff22c51d31e99d97f7
-
SSDEEP
6144:qlOUsKkG15O4K7faLJ8aZdCFnoJ23pCQUo7sRm+e4lI0X6JaX2llChnkU08uuMDD:qlOUdb+4qid8wvo7X+Zm+hna8mtx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a40f4a667234aef2c45cf227a95793
Files
-
22a40f4a667234aef2c45cf227a95793.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 287KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE