Behavioral task
behavioral1
Sample
c0482279597238b373f93d466f01e941.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0482279597238b373f93d466f01e941.exe
Resource
win10v2004-20240226-en
General
-
Target
c0482279597238b373f93d466f01e941
-
Size
608KB
-
MD5
c0482279597238b373f93d466f01e941
-
SHA1
013434203a39774c459be0eac7e0bb2ac626f8a4
-
SHA256
f01875e7d402a9f9f057b630eab3ec7dc233e862e4cb263206a41cfd51623122
-
SHA512
d7a8785ccda5bded64daf6847cc8ba70e9c201226c279cf3fd5735fd03700ccd8531f442f5dfab9fbbf9966d2bac5bcded0a49949ae750281c1e328090148c19
-
SSDEEP
12288:ih3mjTrpPqLxROaO6VfEYymMYqsF3USZ8F5CyUS6nQgqR4aPno+h0k4BvX:43m7pPiOadXl3Ul0v9qR3joBvX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0482279597238b373f93d466f01e941
Files
-
c0482279597238b373f93d466f01e941.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 266KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE