Static task
static1
Behavioral task
behavioral1
Sample
0523bc780bc7f1063aa0570ce5bea12dc4b9061afc528a7fed3fadf1cf442842.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0523bc780bc7f1063aa0570ce5bea12dc4b9061afc528a7fed3fadf1cf442842.exe
Resource
win10v2004-20231215-en
General
-
Target
0523bc780bc7f1063aa0570ce5bea12dc4b9061afc528a7fed3fadf1cf442842
-
Size
31KB
-
MD5
b3578ae6932cfd2bbc2514fe515c4bef
-
SHA1
d2b62df2a553661137738976d8b754626a6a6447
-
SHA256
0523bc780bc7f1063aa0570ce5bea12dc4b9061afc528a7fed3fadf1cf442842
-
SHA512
8a2360b3a3d15f2c1ccd555c2e97b45597097166c450d7b5a79aca8843aca9f10647caacada4b9d7f18713c6914b83d5c51a826880b9761ece5780a8e6598fdc
-
SSDEEP
384:Ax0iwxqsRQmh92tl+zAzTCN0+JGU+AxAr6+I9PfYUD:FiwxqsQOuXS0+JGUJxnLoI
Malware Config
Signatures
-
Detects executables packed with ASPack 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_ASPack -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0523bc780bc7f1063aa0570ce5bea12dc4b9061afc528a7fed3fadf1cf442842
Files
-
0523bc780bc7f1063aa0570ce5bea12dc4b9061afc528a7fed3fadf1cf442842.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE