Behavioral task
behavioral1
Sample
2cb1750268055ed8ea39a9446812661c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cb1750268055ed8ea39a9446812661c.exe
Resource
win10v2004-20231215-en
General
-
Target
2cb1750268055ed8ea39a9446812661c
-
Size
43KB
-
MD5
2cb1750268055ed8ea39a9446812661c
-
SHA1
749c2c6fbf20dad4b7dfad7b8202139e9a353d69
-
SHA256
be2dac8a8944b64ab05a8f2684fec31936c2ac8bb5eda79ba54857669cbdb911
-
SHA512
f23668115fe4cfaca5e4134c7f966c9770d634c4933d10172e03f142cea1418ff3bbde4732087d5f9941d4094a83b84bd8bb55c599f70629c3a869497345baec
-
SSDEEP
768:1DU6+A9aykPvizOLtale6rZt2j/bDZ0cfUn0rYgwuC0gxhD/bqX0FqyDO:1Dv+vta1rf2jvmcf7jwuC0z+DO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb1750268055ed8ea39a9446812661c
Files
-
2cb1750268055ed8ea39a9446812661c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ASPack Size: 512B - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 42KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE