Behavioral task
behavioral1
Sample
b58cbc76cb3340b0a19d4ad944401b6a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b58cbc76cb3340b0a19d4ad944401b6a.exe
Resource
win10v2004-20240226-en
General
-
Target
b58cbc76cb3340b0a19d4ad944401b6a
-
Size
52KB
-
MD5
b58cbc76cb3340b0a19d4ad944401b6a
-
SHA1
cf45e454b8ff52b8d46d1d9a086c2935f5ef4a15
-
SHA256
fd42cc4dadf5909610ece4a85522f6410ed304f943b22a00f3a05f6e455ab9dd
-
SHA512
4005860cee6da58987b4d706af1f84fdeea2a73a2de3517cc9fa0ea0e2d6a752379e53e05eb73a2e7db9f38816843c7800b742495072b687a22b735902bc5b26
-
SSDEEP
768:bvLySKe3e90eo2CHNE8rNs7i668lDHSkQ305Tt9DEmfhVa59xaTUztZrktWAxPhY:bOD6lTr6J6KDHn5TH4mZVa599hdktrY
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b58cbc76cb3340b0a19d4ad944401b6a
Files
-
b58cbc76cb3340b0a19d4ad944401b6a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE