Behavioral task
behavioral1
Sample
c04ffc109a84c6bdd0e5c01d459261cd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c04ffc109a84c6bdd0e5c01d459261cd.exe
Resource
win10v2004-20240226-en
General
-
Target
c04ffc109a84c6bdd0e5c01d459261cd
-
Size
2.6MB
-
MD5
c04ffc109a84c6bdd0e5c01d459261cd
-
SHA1
a1c6cca62c93c99394a8598499a678af907ffddd
-
SHA256
33d9874367e9c2251b31a451ed99e86a17006f97c6d068f4e464d0c50fa6948a
-
SHA512
f70ce69c98e6e88846eb0827b8127bfa3a2c2eb1b445b0cc4654157811de3e43a0087d7b0c529f2278e18315debd7d8f80de463ee07159b45e794556746d2ca1
-
SSDEEP
49152:fsl0/ptvbFuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuueuuuuuuuuuuuuuuuuuuut:O0/pxbFuuuuuuuuuuuuuuuuuuuuuuuuO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04ffc109a84c6bdd0e5c01d459261cd
Files
-
c04ffc109a84c6bdd0e5c01d459261cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 286KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 38KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE