Behavioral task
behavioral1
Sample
cb08a3aa56242d26db7a693998978582.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cb08a3aa56242d26db7a693998978582.exe
Resource
win10v2004-20240226-en
General
-
Target
cb08a3aa56242d26db7a693998978582
-
Size
444KB
-
MD5
cb08a3aa56242d26db7a693998978582
-
SHA1
200f80bd3e6a3082da77389a9baacf20cc776150
-
SHA256
62d615bfaee6a6e793aa1ae15c457c7e5c4b0a6d11cf8e72a661abcead2992dd
-
SHA512
5f49f2db94d9d81923ecdc98c6e84bf27bc05b6c51e3f5294b2e554f1f94c78d845955c1d01ad00a9f9fb3bf814070e0c5822cac3ac468f85b1574eb35a9d6c0
-
SSDEEP
12288:7k6j8L0LVjPWlFAY8fq5YiMo5PHCgr8btlzjioG+wGIvotsnf65c:7fj5VjPWlFhlMot2moGrDvEa65c
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb08a3aa56242d26db7a693998978582
Files
-
cb08a3aa56242d26db7a693998978582.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 285KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE