Behavioral task
behavioral1
Sample
38d2b78c9b7d0e180d0d65b9515b3ddd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38d2b78c9b7d0e180d0d65b9515b3ddd.exe
Resource
win10v2004-20231222-en
General
-
Target
38d2b78c9b7d0e180d0d65b9515b3ddd
-
Size
42KB
-
MD5
38d2b78c9b7d0e180d0d65b9515b3ddd
-
SHA1
1a0aa2d365beb1366ebeb0fce5f01278d3f2dfa0
-
SHA256
194f17f49e553562b0612ec4eec93ad66fb0b97107109b0e4be27d49c9a4b150
-
SHA512
5619d59d2d7a600be0e2f097f8f36dc817a2afb75c1fa52ecb91463dc1e6e6865f3a97621895021aba41939a337b7309f52edb051ef6098d8cde3680b1b4b8e9
-
SSDEEP
768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888+:BzOCay4wV339rPjzbpLwRJ9pSdoIj
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38d2b78c9b7d0e180d0d65b9515b3ddd
Files
-
38d2b78c9b7d0e180d0d65b9515b3ddd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE