Behavioral task
behavioral1
Sample
4a18f1e378994c21a4d0f24695c739d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a18f1e378994c21a4d0f24695c739d7.exe
Resource
win10v2004-20231215-en
General
-
Target
4a18f1e378994c21a4d0f24695c739d7
-
Size
320KB
-
MD5
4a18f1e378994c21a4d0f24695c739d7
-
SHA1
6299f7b88b99e2f1c7e60738ed78154b2dada63b
-
SHA256
352866547f11c6fca1dc7978ae9f52346efd44f5dd5c9dd0279be107247f3117
-
SHA512
5c0f83b4a77ba8e8364b4983ce3a4bb3045ca91cce82f93bc36d008e0bd13d9f99169cbccd0b4f64fd6f802e32138d6eb35af55e737a5618ef09bf42cde9e38e
-
SSDEEP
6144:RQe1il2m7eLENe1SAA8GM9WPx6jidi0+At1Na5614lSn:RbI/Kqmdidi0+AtTU6gS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a18f1e378994c21a4d0f24695c739d7
Files
-
4a18f1e378994c21a4d0f24695c739d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 247KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE