Behavioral task
behavioral1
Sample
ca7c56713066a342d21040cf932a8d20.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca7c56713066a342d21040cf932a8d20.exe
Resource
win10v2004-20240226-en
General
-
Target
ca7c56713066a342d21040cf932a8d20
-
Size
22KB
-
MD5
ca7c56713066a342d21040cf932a8d20
-
SHA1
2e70ab7566317d41d79e7edab0c23b42ff08b1e1
-
SHA256
71d4b787beb78f21355a3b8f8df3c9e00123cdee833fb210000a69fda6214482
-
SHA512
fd43814704c6042471a6ff0d586f7f2e6ecac244f526766259d59fa581dc0738e9baf8bde6a5173cb8a4b0d20bd5b7866ad23108a477f853fa4f70c34d0e956e
-
SSDEEP
384:JMmWyajiLokmbYpjst3WQspWyuxZvhGWMOPgdyKETbZNOO7TAQS5Y8Q:OmWyaj3bYB63W1U7ZvljNjNOnrK
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca7c56713066a342d21040cf932a8d20
Files
-
ca7c56713066a342d21040cf932a8d20.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 22KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE