Behavioral task
behavioral1
Sample
c9247656a1024943d4b3e3773040e606.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c9247656a1024943d4b3e3773040e606.exe
Resource
win10v2004-20240226-en
General
-
Target
c9247656a1024943d4b3e3773040e606
-
Size
60KB
-
MD5
c9247656a1024943d4b3e3773040e606
-
SHA1
ded62130c110c5bf454f0ba36b00905597d3501c
-
SHA256
47575dd6a9934b0af0af83f1adf92f0a2c330f1c81fdbe08ea4ac83d56eb8a67
-
SHA512
c54476bfcbfa48586ce80e09058694b78d3e617a27a7ca0cae8876076829280bbb65c6c5e4854cf5f54fd02bf42ed4c564419e8070509c9f81ec1fd401895db2
-
SSDEEP
1536:EwkaICBDmWZQ3MAzIn7f27rPqepDysSYTfRWwx5A:P5UDMDO7zqepDysHTpnA
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9247656a1024943d4b3e3773040e606
Files
-
c9247656a1024943d4b3e3773040e606.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE