Behavioral task
behavioral1
Sample
c3492f40ed8cbdfe30555cf8e45c690d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3492f40ed8cbdfe30555cf8e45c690d.exe
Resource
win10v2004-20240226-en
General
-
Target
c3492f40ed8cbdfe30555cf8e45c690d
-
Size
449KB
-
MD5
c3492f40ed8cbdfe30555cf8e45c690d
-
SHA1
75b8d8096ea7259b91b39ab9dce7d4a02ded54a2
-
SHA256
7d46e0b8538b892707ee5032b4f55ab4a7ff87eb3fc35dcec2891da3a9e714ba
-
SHA512
b55cb829ba58bf966b759b54cfd7a4191828a7dde482908e5d865fac44541824e58c16d34c00f9f3d6dbd27c09302e1abce3e11f4a9ec5c8f795e79c7d33dc9e
-
SSDEEP
12288:eNOMciata15bbOLj9GdBnGSGnPJFXhuVHYBQnEX9m:ccajbemQ7R5UHYz8
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3492f40ed8cbdfe30555cf8e45c690d
Files
-
c3492f40ed8cbdfe30555cf8e45c690d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Cvyt Size: 4080.0MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Dase Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iaqwd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zbf Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rlper Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rzvde Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rltf Size: 46KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ade Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajfgt Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA