Behavioral task
behavioral1
Sample
597f4530f56a08f6cd7e80c9ff078219.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
597f4530f56a08f6cd7e80c9ff078219.exe
Resource
win10v2004-20231222-en
General
-
Target
597f4530f56a08f6cd7e80c9ff078219.bin
-
Size
1.3MB
-
MD5
597f4530f56a08f6cd7e80c9ff078219
-
SHA1
5cbca4ddff6575b7bc630cb2cce3aac84fb59c92
-
SHA256
340c928466b1671d573c9d1ce6b9b526f433e1a19b4ec01b73357edcaf5d8bb8
-
SHA512
f7d798bd2d4d0708ce52cff7f29e6a5ea0fc27a811d92ff7571b1f4cb095a43daa356f2f0cb6256db92a24a9da84f81b31abf6d70b73cae49e25de05d1b21ae4
-
SSDEEP
24576:VULgLap6Jw46w9jV4lRi4eGn9FK80yNq0esn3NyCWAFcqlC4BJn/i/5Xcll7bFC3:VOgusy4R491W0eCqqlC4BJ/iirXFC4Z
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 597f4530f56a08f6cd7e80c9ff078219.bin
Files
-
597f4530f56a08f6cd7e80c9ff078219.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 403KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 939KB - Virtual size: 13.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE