Behavioral task
behavioral1
Sample
29e3f531e966c4532a5222e191d487e6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29e3f531e966c4532a5222e191d487e6.exe
Resource
win10v2004-20231222-en
General
-
Target
29e3f531e966c4532a5222e191d487e6
-
Size
455KB
-
MD5
29e3f531e966c4532a5222e191d487e6
-
SHA1
68a8efead8818d1fd54ae76b0567b34bd1f31da2
-
SHA256
24f0eadf017916ad426f88fd8a5b23e9397c1aa271157428e5054faf5f3c3865
-
SHA512
f85c62fd5bd23e998f405ffebd202ae0698e677e61ea0f77385d4ff9adb5aae746bd5aec6f078507cf596d71143d095f0d5120ffab87d4028c8b7c63eb77eed4
-
SSDEEP
12288:VoQbL+LH/WYAMySBoYrwfSnuZS3n96iOHzd:VZL+MaraSuZS3967
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e3f531e966c4532a5222e191d487e6
Files
-
29e3f531e966c4532a5222e191d487e6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 40KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 398KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vc++ Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE