Behavioral task
behavioral1
Sample
85ac11ddc181c57718577872621e6cac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85ac11ddc181c57718577872621e6cac.exe
Resource
win10v2004-20231222-en
General
-
Target
85ac11ddc181c57718577872621e6cac
-
Size
17KB
-
MD5
85ac11ddc181c57718577872621e6cac
-
SHA1
524ff8322a3906181e60a794a253fbf0520271f3
-
SHA256
dd7271c9ab60015fcef85f529dce979f15895f7e80d262a41170497a52936d3e
-
SHA512
b8c8da607d4562df264b9952b8f5dc4982f100cb7a765d66cc346611b4b681254195d08bcfd7c8641d3125b266226353299bf608857e9aaa1418d968a585e9b0
-
SSDEEP
384:A9ZeF42bgg0m8Tikoh3nDykU3iicuAxQr6+S9Pfu7n5:A3v249a3lUgxXdeV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85ac11ddc181c57718577872621e6cac
Files
-
85ac11ddc181c57718577872621e6cac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE