Behavioral task
behavioral1
Sample
54047539b30c59f0fd7c871f8003877f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54047539b30c59f0fd7c871f8003877f.exe
Resource
win10v2004-20231215-en
General
-
Target
54047539b30c59f0fd7c871f8003877f
-
Size
38KB
-
MD5
54047539b30c59f0fd7c871f8003877f
-
SHA1
99599cb2c765e026c07f7802f2b21face882d2ae
-
SHA256
b8b287d4b2915a90987e8644ac4cf5c887df4f8dbf37af03f774b76427dae36c
-
SHA512
8ad16ff3a4c7f73d89866e8bacbe8b4b6aa62759e841278c9b977eb5b18c8b043018161191f3ba7a67bee39a0e4f23e3817c537027c21e32fb865956d62a44fc
-
SSDEEP
768:8Jef5ssqyuSCrwpH5+CnsZpMwZ/zfHpM6RL0Wguve9Q0UJGgJxwLoI:8JCsxyxC8H5+3MwZrbnguvkQ0UJG
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54047539b30c59f0fd7c871f8003877f
Files
-
54047539b30c59f0fd7c871f8003877f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE