Behavioral task
behavioral1
Sample
c5a973972f8966673dad8fb65bb748ff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c5a973972f8966673dad8fb65bb748ff.exe
Resource
win10v2004-20231215-en
General
-
Target
c5a973972f8966673dad8fb65bb748ff
-
Size
598KB
-
MD5
c5a973972f8966673dad8fb65bb748ff
-
SHA1
14da9e034e1959aad2919bc3eec6dc2bb782ce2b
-
SHA256
cefff3406b8b31a4a943b22203e2ad0f88e9300de08ff4e6f24edbff5ec09b7e
-
SHA512
5ff3a96c1e0eb2006e3857dd3c8a205794184405180d29ed35fa671d5512fbaada717b1e862164f5c7aa9af349e8bac72aaee6d585d0292e24778743c68e7acc
-
SSDEEP
6144:nG5czhjqdk9rKC1PN+ou3DAa86NQCJYHwaBYFbiz5u7K3FEHNSS2kyv/SCYS/hQ4:wcNNX+t3DZPNQwkYF+f3qt46lO1wHqn
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5a973972f8966673dad8fb65bb748ff
Files
-
c5a973972f8966673dad8fb65bb748ff.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 203KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE