Behavioral task
behavioral1
Sample
78a583f00e63daede0548d3325a5a64f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
78a583f00e63daede0548d3325a5a64f.exe
Resource
win10v2004-20231215-en
General
-
Target
78a583f00e63daede0548d3325a5a64f
-
Size
536KB
-
MD5
78a583f00e63daede0548d3325a5a64f
-
SHA1
a942c62b6162f25183bdf99d040c94a47dcc9535
-
SHA256
0d01273334d2a9376d6c6c764e1f921ac2205ba118b44225407a3686f1dc9d0b
-
SHA512
0976ddd12da1feb16821dfc5ead81f3e957dd8b9b82b7ff1371b97b1925197135943af7a8dae279337d83dc1d31d81d39dc2cfa3a003e96f849f3d88a989c16f
-
SSDEEP
12288:yQk68X18+O0PU1ywrm2dnHhgnj0yGXWeYEvSPHcaNwdGjBIh4phSR:7k6g1xez1hgjDGGV4a806COR
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78a583f00e63daede0548d3325a5a64f
Files
-
78a583f00e63daede0548d3325a5a64f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 535KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE