Static task
static1
Behavioral task
behavioral1
Sample
03f821880bb157d938ff3b6391ae135e47ce4800d71e69d3b990430df3e013bc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03f821880bb157d938ff3b6391ae135e47ce4800d71e69d3b990430df3e013bc.exe
Resource
win10v2004-20240226-en
General
-
Target
03f821880bb157d938ff3b6391ae135e47ce4800d71e69d3b990430df3e013bc
-
Size
1.6MB
-
MD5
261a0b8f6f806b1b47f88ce23e334f99
-
SHA1
a4cc70109a66e25bfe04ef9ff6c9a2008a333056
-
SHA256
03f821880bb157d938ff3b6391ae135e47ce4800d71e69d3b990430df3e013bc
-
SHA512
5808d057ff2a3d6361a566abf34e319b86e27d13f9e58ba4b22f5545a6f42a35adbd276cc280e501abd378b41694174113c7c06b5436473fb85cf2325f7e659d
-
SSDEEP
49152:TFmgLq31e3YX75IvGpIFRBXi+SBJ+1UHbY2D5DeSPeakTA:TsgLq31eoX758zFRBXi+lOHbVH
Malware Config
Signatures
-
Detects executables packed with ASPack 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_ASPack -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f821880bb157d938ff3b6391ae135e47ce4800d71e69d3b990430df3e013bc
Files
-
03f821880bb157d938ff3b6391ae135e47ce4800d71e69d3b990430df3e013bc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE