Behavioral task
behavioral1
Sample
c949f3cf950af0f7a5de1b4efeb27859.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c949f3cf950af0f7a5de1b4efeb27859.exe
Resource
win10v2004-20240226-en
General
-
Target
c949f3cf950af0f7a5de1b4efeb27859
-
Size
84KB
-
MD5
c949f3cf950af0f7a5de1b4efeb27859
-
SHA1
80a5dd2d210ccc3dedc5261bad0efd2dd895a114
-
SHA256
320c4241faaea31441a5e02f1f23a367e19018e4bad157b57e12304d90484a05
-
SHA512
762d72a39d76104e1160dbc7fde1648655226951f7dfef157247b9dfbd825ff46b0d1086e194a84c6d4f680bd7af4abe7913be874c83349c9859dc3f264c6f2b
-
SSDEEP
768:Rj+uEppUXgnl+tQ4eD1bdoux+ha5SnWsyqAggx:DEpSe+2T1arnWsyqFg
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c949f3cf950af0f7a5de1b4efeb27859
Files
-
c949f3cf950af0f7a5de1b4efeb27859.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE