Behavioral task
behavioral1
Sample
9c1e5158102dae0898d1ba75a29bc524.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9c1e5158102dae0898d1ba75a29bc524.exe
Resource
win10v2004-20231222-en
General
-
Target
9c1e5158102dae0898d1ba75a29bc524
-
Size
1.1MB
-
MD5
9c1e5158102dae0898d1ba75a29bc524
-
SHA1
b8bbabd01c00772e30b6cd964441ca3a7225ee82
-
SHA256
e992bdbad8a173f65be9a3f83a1dd38dd597288422ac89d9921b271b716a9226
-
SHA512
e571290b2122b9e6182787e4d372bfb7e0e862d7b1ad6753692091f0239d50de4498735d279af8e8519c34f353b43be621e8303bd53c88afa103a9af292d77e6
-
SSDEEP
24576:gVXY38OQxoofhobcccjJYarx8IFp1HLx1UeefYHPUtrn61R0mz:gVIMOovhoIcS22NI9AHPUn
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c1e5158102dae0898d1ba75a29bc524
Files
-
9c1e5158102dae0898d1ba75a29bc524.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 213KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 896KB - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pps Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE