Static task
static1
Behavioral task
behavioral1
Sample
09ca77ee968f280dea22c457846f2e7aa7a5f6208e8f9e4d68111211d48b7f59.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
09ca77ee968f280dea22c457846f2e7aa7a5f6208e8f9e4d68111211d48b7f59.exe
Resource
win10v2004-20240226-en
General
-
Target
09ca77ee968f280dea22c457846f2e7aa7a5f6208e8f9e4d68111211d48b7f59
-
Size
713KB
-
MD5
6e20f4e897a1e769396cc9b17fc5137b
-
SHA1
9ca6dc0931ff88352df243a8e92791efd9d0fd8d
-
SHA256
09ca77ee968f280dea22c457846f2e7aa7a5f6208e8f9e4d68111211d48b7f59
-
SHA512
a5b27e3526609b9c17d363b9a9fe3f60fe46bfb58145e2f55d5a470c5791e85bb149d737b3204c2ae268eb0dd4b213ba9018bd1a69da462f8cb2f277067407c6
-
SSDEEP
6144:Ruj8NDF3OR9/Qe2Hdklroanz0y/HrF0M4cFKxk:AOF3ORK3dj+z0y/HrF0M4cFKxk
Malware Config
Signatures
-
Detects executables packed with ASPack 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_ASPack -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09ca77ee968f280dea22c457846f2e7aa7a5f6208e8f9e4d68111211d48b7f59
Files
-
09ca77ee968f280dea22c457846f2e7aa7a5f6208e8f9e4d68111211d48b7f59.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE