Behavioral task
behavioral1
Sample
a1bb19b686243c8eddb6336a9df4854e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1bb19b686243c8eddb6336a9df4854e.exe
Resource
win10v2004-20240221-en
General
-
Target
a1bb19b686243c8eddb6336a9df4854e
-
Size
278KB
-
MD5
a1bb19b686243c8eddb6336a9df4854e
-
SHA1
99a4773235c25949d7640ed0d60428e1a196659d
-
SHA256
ed7c0804b350b938e005ca07780a2967fe83463104ddcbfa644b925cc5bfa29e
-
SHA512
4a843942230b6023ad8c48ae3d8c8883d455291f7b9de492cbf3d13408e13132a6282a6d744d4cc55a0b3f3f711532230511d8d17698b6b1a1c338e809406195
-
SSDEEP
6144:VgcPv1135t85o8sJMhoSPPv0jM9mxi0nQ17+IKyJUctMv0:VhP/H85o8JoAP8jM9+K7cyece8
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1bb19b686243c8eddb6336a9df4854e
Files
-
a1bb19b686243c8eddb6336a9df4854e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 250KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE