Behavioral task
behavioral1
Sample
8d1388cde847051d283aa3fde1568256.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d1388cde847051d283aa3fde1568256.exe
Resource
win10v2004-20231215-en
General
-
Target
8d1388cde847051d283aa3fde1568256
-
Size
117KB
-
MD5
8d1388cde847051d283aa3fde1568256
-
SHA1
d4d874d0d177781491847810250bee50a76411d3
-
SHA256
d75cbf3e503eb6ed8b1bbd0d38bec5fc28e1abfcc916e6aa098e0ad751aeef85
-
SHA512
d0ec3b16298a4269064592dde638671b04528eddb77dda89f871c62c2703e47adb2fc7a3b841d442b4cc24c8aececf1926a940f12d07369a524e5199d16f3c6b
-
SSDEEP
3072:aC+Z0/2WduJ7N5GqAnSrxbAtfMmzcOj68wzJ:do0/2Wd0xUZWWw
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d1388cde847051d283aa3fde1568256
Files
-
8d1388cde847051d283aa3fde1568256.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE