Behavioral task
behavioral1
Sample
7f29901801274c48cc74297ecb37960c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f29901801274c48cc74297ecb37960c.exe
Resource
win10v2004-20231215-en
General
-
Target
7f29901801274c48cc74297ecb37960c
-
Size
56KB
-
MD5
7f29901801274c48cc74297ecb37960c
-
SHA1
4a970df9de723cf74c1f55f1a71b7001f05a4883
-
SHA256
3178435a1ec01a66957eaded534d4a1a032e2a3890065ca9b3c282198c18940d
-
SHA512
cfd0c142d1b133074c1c9360b63ee05120eccde99474454985e882dc6505c5cd659440ed8d246604fe6a81a5e395ab749ce06f6595d118c970efb9acb0c21586
-
SSDEEP
384:Tl0F2b/WQzTTlZIp1fW7FgUIy1l2jYE0WaW7FgUIy1l2jYE0W:Tlw2bnXB97FgulK7Fgul
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f29901801274c48cc74297ecb37960c
Files
-
7f29901801274c48cc74297ecb37960c.exe windows:4 windows x86 arch:x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
.text Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 40B - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ