Behavioral task
behavioral1
Sample
bb7b7cfb08f1fbdf71c32a120bdbff5d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb7b7cfb08f1fbdf71c32a120bdbff5d.exe
Resource
win10v2004-20240226-en
General
-
Target
bb7b7cfb08f1fbdf71c32a120bdbff5d
-
Size
49KB
-
MD5
bb7b7cfb08f1fbdf71c32a120bdbff5d
-
SHA1
19775defe4205d0b0a0e00392383f26c212443c7
-
SHA256
5e051f73915a408577be38031409b5a6cdaa9c84d7709a00613c8ca765127527
-
SHA512
8b5ff31da369053ff528790df6a5aca47233fdbeb93137e29728ba91df4003d6070f2a5b08d1b5d1af90515c5aee85b71e3151b6f8100fca096d3d13875a95fa
-
SSDEEP
768:vyt/7aMVA8hsEyhhABkx4mGtJw9mim9KilrNnfp6SBhQ9nI+pExWha5:atPVRh9yhu2nGtJOBiN1fp6YhQ11z
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb7b7cfb08f1fbdf71c32a120bdbff5d
Files
-
bb7b7cfb08f1fbdf71c32a120bdbff5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 31KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE