Behavioral task
behavioral1
Sample
c011583cd6bc26964b3d9924a5efc3f1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c011583cd6bc26964b3d9924a5efc3f1.exe
Resource
win10v2004-20240226-en
General
-
Target
c011583cd6bc26964b3d9924a5efc3f1
-
Size
280KB
-
MD5
c011583cd6bc26964b3d9924a5efc3f1
-
SHA1
077fbdf7e9a78e1eea52399753aace2c5696f423
-
SHA256
e5696be2b831f4abd7dacd0eb304e64ae4c1f61135593df4af84aabcdc807fb1
-
SHA512
d4df8a5cfcea0d27723747211980ccc9dd5f23bc762196034ab6585e8e16eaa33fb930639b7049457afc04eeb768fc6f4e1a6af9c3cbf26ef3e75a31b84cbdab
-
SSDEEP
6144:/48uaZG1amNB9ZzxjipBb2O+Hh3l2UJaHVS912HUvf5725t4B4:g8uadsbtjiziHaU024Up7Y4B4
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c011583cd6bc26964b3d9924a5efc3f1
Files
-
c011583cd6bc26964b3d9924a5efc3f1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 247KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE