Behavioral task
behavioral1
Sample
3903a744d57f15a64d71d17cf1b50c36.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3903a744d57f15a64d71d17cf1b50c36.exe
Resource
win10v2004-20231222-en
General
-
Target
3903a744d57f15a64d71d17cf1b50c36
-
Size
18KB
-
MD5
3903a744d57f15a64d71d17cf1b50c36
-
SHA1
f115e5528e66bad469c54c5341fdf39b23d6d066
-
SHA256
b4ef234fe81f4f962adc77cb04bbf1efa0cdedd46554d31cc5d8b1fe15d44e7c
-
SHA512
3643ae73a0c2b5f427a3ce462834fbe441af87f538208a2e94605e83c3ddb5a42e67994fc50d7aad24fd4eb768cac7c792ee780fd4d095247445ebeb530286a8
-
SSDEEP
384:W+qVqo1GQTDWUGzJsIRQpu+b3thFfzNyMBhGAxQr6+S9Pfu7n51:Wt57TDWfQ3LAcxXdeV1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3903a744d57f15a64d71d17cf1b50c36
Files
-
3903a744d57f15a64d71d17cf1b50c36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
-BLTEAM- Size: 14KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE