Behavioral task
behavioral1
Sample
63d661dccaec73028db18bd88b6ed775.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63d661dccaec73028db18bd88b6ed775.exe
Resource
win10v2004-20231222-en
General
-
Target
63d661dccaec73028db18bd88b6ed775
-
Size
417KB
-
MD5
63d661dccaec73028db18bd88b6ed775
-
SHA1
85572eeeee0a5d8eeacd8d0d930e457fb899bb9d
-
SHA256
815e08c90e00f773fa80c051b2f6a28586696079e36357a7493404acbb91378b
-
SHA512
4016106da96e09eb8a0c0d0e094bad4e140fdedd851fea61f55baa36e534eeab7d7ee4403eeb4a600a169ae99fb9b2af4ff22e8448c78dac49779237d01b17ed
-
SSDEEP
6144:1yxQCfxy3VBt9yDhCwTck8DGujSfi+8V5ERZs+ds/gQ6/9bpT5QhTA0pnhk:oxPI3HwTck9uW6+8j8ZTuCnTWtnhk
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63d661dccaec73028db18bd88b6ed775
Files
-
63d661dccaec73028db18bd88b6ed775.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 328KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE