Behavioral task
behavioral1
Sample
4f369fcaf670c23016842633f9e8d419.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f369fcaf670c23016842633f9e8d419.exe
Resource
win10v2004-20231215-en
General
-
Target
4f369fcaf670c23016842633f9e8d419
-
Size
108KB
-
MD5
4f369fcaf670c23016842633f9e8d419
-
SHA1
c6e80c4271ebedf80c7e1620c0e0dce26c3fe93b
-
SHA256
18696dd3a918e7a357407a85d3c4a32af3e497042fdd6975b39aab2d7e52964a
-
SHA512
c8e4220912c06d55abed50e3369b748dd383d6eddae1e0dd523297c52bb7cecb84a9f8fc590aafa7f66f4fb42545fcbe8ef2c6f4834508cadcc205dd0f629f39
-
SSDEEP
3072:3MNw5Z4o5UEzOS9lhO1hKL/z2buuX+olvyFod7xIxc:3j4oGEzObh8/0Fxs9c
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f369fcaf670c23016842633f9e8d419
Files
-
4f369fcaf670c23016842633f9e8d419.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE