Behavioral task
behavioral1
Sample
9c53a418cada103a149c1f1e0436dff1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c53a418cada103a149c1f1e0436dff1.exe
Resource
win10v2004-20231215-en
General
-
Target
9c53a418cada103a149c1f1e0436dff1
-
Size
419KB
-
MD5
9c53a418cada103a149c1f1e0436dff1
-
SHA1
2e80132f6cc737f2838ec8a6a25bef88c678a418
-
SHA256
6f16d0071592fc8547395506935902bc3375d43f586b2c21b157712bb3816f66
-
SHA512
7fb9fedec0793ff8df34d2b7635bbb12f794de5b1b72d757cfdc9ec726d93f205bebe016eeb9b010ed66eb83f3d90e75d1900bfd62345b465912ded123004bb7
-
SSDEEP
6144:OX+rcVkdLMNPo//iJiAPb8UpK8ZbOfkkV0eVa+aTGVJI0ce9wnmp2QHFS:OXEcedmu/cK8ZbjkV0l+oG7IDSwnoF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c53a418cada103a149c1f1e0436dff1
Files
-
9c53a418cada103a149c1f1e0436dff1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 333KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE