Behavioral task
behavioral1
Sample
74a418e67bc94d381bae2b96c1faee17.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74a418e67bc94d381bae2b96c1faee17.exe
Resource
win10v2004-20231215-en
General
-
Target
74a418e67bc94d381bae2b96c1faee17
-
Size
136KB
-
MD5
74a418e67bc94d381bae2b96c1faee17
-
SHA1
4c82623f9099bca7ecbcd60f757f4a8626b3464b
-
SHA256
4682230da6313d70bd257d80ee8fe0854ac216843350fe042ac25c58f85fc1ef
-
SHA512
afbf40f4f4200ed6df70dbac15ee34f4edea54e510c55a250105d62946a34e8d4912484cb5e4f4ffaafee3a12f70b8fe0c5edf241f0ede6625297f96aa9597a5
-
SSDEEP
1536:jOgVPwzJWY1urHjjwJDxg0trb8jJzPnGC/s+BXLE+ptlf26WLpflZK:jRwkYQPwtxZMhPGClgWjSvZK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74a418e67bc94d381bae2b96c1faee17
Files
-
74a418e67bc94d381bae2b96c1faee17.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 63KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JHDFRWG Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE