Behavioral task
behavioral1
Sample
4087361d88fa36da80bfc947ddbae7c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4087361d88fa36da80bfc947ddbae7c4.exe
Resource
win10v2004-20231215-en
General
-
Target
4087361d88fa36da80bfc947ddbae7c4
-
Size
21KB
-
MD5
4087361d88fa36da80bfc947ddbae7c4
-
SHA1
e6a0b6a22d9161f2c79ae0606a6b9f80d4557022
-
SHA256
a5993dda63eb5079801bc94420063104df708fd92db12f7390a91ad775f6eff3
-
SHA512
c6a83c5cf5a24e5accfc11f448133ceff0b9cee5af1f96fa4eb0f053a09a780e05e541688d47a0c456ab136748597c3af108254cf701958e57cca3b02048bf54
-
SSDEEP
384:ri/6WheQkhcNvU/PkTXtenVgakFN6ku73F0raMHX0CgZY4vtbqHNAxLr6+S9Pfux:rinhezhcFQniakP6l73ypcxNyGxydeVv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4087361d88fa36da80bfc947ddbae7c4
Files
-
4087361d88fa36da80bfc947ddbae7c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE