Behavioral task
behavioral1
Sample
39d25cf0b459ce2331b211e80d45e295.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
39d25cf0b459ce2331b211e80d45e295.exe
Resource
win10v2004-20231215-en
General
-
Target
39d25cf0b459ce2331b211e80d45e295
-
Size
408KB
-
MD5
39d25cf0b459ce2331b211e80d45e295
-
SHA1
5092ef9d3b29dc4633406fc00937515b3e4e95ef
-
SHA256
dd5d75198f958eb8e9500198892d803dcfb112ae912c32b48e46707f5ffc9e3d
-
SHA512
e14b6ad2962bf80912c9cea68c678dae1dc212cb0b46fb215b7f0514f6c218c2694f97f43e5aa43df6ac49586a23f58879c870c440c702c45818d6f438758199
-
SSDEEP
6144:7odiq2WPpLvKkanT4yZ9rCPtz8C98drR57YgIkJ3zjPdwMoApBlhO9Hm12uE:0i2VvKxT4a+wA8/57YCh0ApB78luE
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d25cf0b459ce2331b211e80d45e295
Files
-
39d25cf0b459ce2331b211e80d45e295.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 335KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE