Behavioral task
behavioral1
Sample
cb8a8d6acb83ac91334c2b6a1f05da5a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb8a8d6acb83ac91334c2b6a1f05da5a.exe
Resource
win10v2004-20240226-en
General
-
Target
cb8a8d6acb83ac91334c2b6a1f05da5a
-
Size
139KB
-
MD5
cb8a8d6acb83ac91334c2b6a1f05da5a
-
SHA1
31a867de6b11303531be8c724491817dd3393f33
-
SHA256
fa54460c51b1a4cb429d29c8848a8c0e4ab645c90dc713bd937d401614b55e6b
-
SHA512
269b7a15629b45632958e0090ddc2ed5cf0c5a64ae706f8e1bc9131f36883f18d127f637e22bd4df90f5b0ec3ab5ef12e0d415a7d6c385ec3580441f5ae45fee
-
SSDEEP
3072:iFPv5WnFUPI8Y6LLR+/jjz9nm/pC/aqslw1pMEeeV09vnKB:iFZWKLRL2ijlQprV09
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb8a8d6acb83ac91334c2b6a1f05da5a
Files
-
cb8a8d6acb83ac91334c2b6a1f05da5a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE