Behavioral task
behavioral1
Sample
63ef2d80910b56769522614fb4c5ca29.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63ef2d80910b56769522614fb4c5ca29.exe
Resource
win10v2004-20231215-en
General
-
Target
63ef2d80910b56769522614fb4c5ca29
-
Size
34KB
-
MD5
63ef2d80910b56769522614fb4c5ca29
-
SHA1
eaeab7079ffc66b3037b03de0b2c1aa4e38ee8a0
-
SHA256
2a168b01aab9da5c036f045222256cb67d8f25c145507183327c2fcbbf1f292d
-
SHA512
e9f5b0c46a2f859d4f4d6fd9985863dea0347e5bc0b5fe310ce0fd8f026da7336974535bad5105dcfec0c4661f3c177d4356620e2e2c629f6e7874e5c4de30b0
-
SSDEEP
768:VHavDIH63V3uVJnBny+AMma1dzcm9BcxXdeVI:VH8cH6lOnwMmygSc5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63ef2d80910b56769522614fb4c5ca29
Files
-
63ef2d80910b56769522614fb4c5ca29.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE