Behavioral task
behavioral1
Sample
2ce8a12d12bf56468e2eec7c932048e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ce8a12d12bf56468e2eec7c932048e4.exe
Resource
win10v2004-20231215-en
General
-
Target
2ce8a12d12bf56468e2eec7c932048e4
-
Size
158KB
-
MD5
2ce8a12d12bf56468e2eec7c932048e4
-
SHA1
6c34f2bc4d31bef07edb807de50a9c11afe07974
-
SHA256
c5b09fb228a743dd88d52a812a24ed9f8005853006448e99c9100644d74c6992
-
SHA512
cdcafbafea41efef108f59ab9344b34151cecbb72fd1f293d3884c5edcc1f4f7dce2437bd228d92e47f282c71db671e39faba62911341684f7ad10ec2566b387
-
SSDEEP
3072:kq3dF+RosNL1pDMTo2siKd4GlH9eSK9+9xUGnVVV4x1C9KLcfEiuZl2:kGdRsV/52aB5K03nVVV4IfXuZ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ce8a12d12bf56468e2eec7c932048e4
Files
-
2ce8a12d12bf56468e2eec7c932048e4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 139KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE