Behavioral task
behavioral1
Sample
0224f29ee2f03967d730d87ea7c1688ecec5c20a876c673360d99a1c0a581632.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0224f29ee2f03967d730d87ea7c1688ecec5c20a876c673360d99a1c0a581632.exe
Resource
win10v2004-20240226-en
General
-
Target
0224f29ee2f03967d730d87ea7c1688ecec5c20a876c673360d99a1c0a581632
-
Size
145KB
-
MD5
4a5d4b95f625a46a6172da26b0db4246
-
SHA1
f1a3ca4c97981ad1ef96ded25f7ea48126711522
-
SHA256
0224f29ee2f03967d730d87ea7c1688ecec5c20a876c673360d99a1c0a581632
-
SHA512
f7adacbc79271abbda67b29e02be12894f760232251151e321ea82b330752429fda09cc7b94d464004e3a8e626ac4af8417e97abec993e8f0668f2a167628e7d
-
SSDEEP
3072:v9C0VUeG0ZncqUVK5bPbMeofiKs59MI+w4qzxqz/UZOhBO+fem/LF9hZv:v9NVgtqUA5PIbI+6Nqzc8nO+f5F
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0224f29ee2f03967d730d87ea7c1688ecec5c20a876c673360d99a1c0a581632
Files
-
0224f29ee2f03967d730d87ea7c1688ecec5c20a876c673360d99a1c0a581632.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 138KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE