Behavioral task
behavioral1
Sample
c61508621954936a0bac40ae6a74ef3c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c61508621954936a0bac40ae6a74ef3c.exe
Resource
win10v2004-20240226-en
General
-
Target
c61508621954936a0bac40ae6a74ef3c
-
Size
179KB
-
MD5
c61508621954936a0bac40ae6a74ef3c
-
SHA1
53220a8a436098da39457f48d251efe1d8feb3f1
-
SHA256
38cab4a930ec9ac3cfef711ff394d1a8546348a23de7e375c70407177568004d
-
SHA512
63d6b89ed750eac4af4d9a97a05971d0a18e8d0888a4f4d09cbeb281915de70bae7dae603f498cb422899ebf4d318f73d4a4fef19c58ace6cd920e4fbdf622bb
-
SSDEEP
3072:Qn10AV+j62uiqR/omVq+0996E/GBDph63+m9W6HMRmVrynarATrgpBtJHS0sACSc:QncuXiqRAmV3bE/G15mA6wnasTrotp/G
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c61508621954936a0bac40ae6a74ef3c
Files
-
c61508621954936a0bac40ae6a74ef3c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 155KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE