Behavioral task
behavioral1
Sample
ab290f18b0fe3ce172638dab58e9d36d.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ab290f18b0fe3ce172638dab58e9d36d.exe
Resource
win10v2004-20240226-en
General
-
Target
ab290f18b0fe3ce172638dab58e9d36d
-
Size
18KB
-
MD5
ab290f18b0fe3ce172638dab58e9d36d
-
SHA1
0e0b85ed340af8fa736536f2a8c2af107164c895
-
SHA256
02e5abc84faa54742a81f48b4c842bcc35f79a78fde51bda22d5b822a4f2e87b
-
SHA512
6cdb567ee4428c04eaff3e6517002bed8b4278a92cc3379d6af7c2d325644d013649926d41a7fef3fe63f1d2d0cb22930d714590a36f7d33a695161758e99ab1
-
SSDEEP
384:9iOI94SHzopdSM2KZV82R3d0oivHynJYSAxer6+e9Pfqbn1:oO8HkKKj7WSnJUxRha5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab290f18b0fe3ce172638dab58e9d36d
Files
-
ab290f18b0fe3ce172638dab58e9d36d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
��� Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE