Behavioral task
behavioral1
Sample
3d6cc1ac88ebecc47c4c2fcb6df1b6f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d6cc1ac88ebecc47c4c2fcb6df1b6f7.exe
Resource
win10v2004-20231222-en
General
-
Target
3d6cc1ac88ebecc47c4c2fcb6df1b6f7
-
Size
147KB
-
MD5
3d6cc1ac88ebecc47c4c2fcb6df1b6f7
-
SHA1
738fe84a3593a9f3d1f9bbc2b2ef5a88b44c2b09
-
SHA256
427f9ae81fba4e3ccaea125aaa25579e797db083952c28f667faf9acb00e08d2
-
SHA512
b40d31f24346f77127e9b1bfeb4543de81eae631ff39b4a5bc4af291bfa80dea0e1b3f7d53ff7a9f95a542af65aaa40a642daa321ec63adb5339880e697bf034
-
SSDEEP
3072:UsKURYXbWVZxBrFa73OkoPGCnsZvZm0sZHSnpzk2rkO3cG4k+OZw:UEIWDZaSRG6srgVGpzkG4Faw
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
3d6cc1ac88ebecc47c4c2fcb6df1b6f7.exe windows:4 windows x86 arch:x86
Code Sign
2f:4e:7d:64:12:e9:d5:b1:4f:26:b5:27:db:e6:e6:eeCertificate
IssuerCN=Przemek Rusiecki,OU=Freeware,O=www.SOFCIK.xx.pl,C=PLNot Before31/07/2004, 23:00Not After31/07/2010, 23:00SubjectCN=Przemek Rusiecki,OU=Freeware,O=www.SOFCIK.xx.pl,C=PL02:2f:0dCertificate
IssuerCN=Certum CA,O=Unizeto Sp. z o.o.,C=PLNot Before28/08/2002, 17:05Not After28/08/2012, 17:05SubjectCN=Certum Time-Stamping Authority,O=Unizeto Sp. z o.o.,C=PLExtended Key Usages
ExtKeyUsageTimeStamping
26:97:e0:f2:f7:28:1d:76:0c:0e:4a:f7:61:5c:93:ef:7f:81:12:63Signer
Actual PE Digest26:97:e0:f2:f7:28:1d:76:0c:0e:4a:f7:61:5c:93:ef:7f:81:12:63Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 108KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE