Behavioral task
behavioral1
Sample
cdf5654356230caf2e19f5cf447426fb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdf5654356230caf2e19f5cf447426fb.exe
Resource
win10v2004-20240226-en
General
-
Target
cdf5654356230caf2e19f5cf447426fb
-
Size
622KB
-
MD5
cdf5654356230caf2e19f5cf447426fb
-
SHA1
83db92556241769c5e5a67f62ae4a7a7c77d8f43
-
SHA256
73618657f1d767e8a67b72819d92aa9a82d93fc3ade9a635d49b3a6c6a1a1be5
-
SHA512
31cacb0183b39a49d61bf479a8c1558b70e86c6adf056cdb37062632007d3315835fff4a90e795f66a9acea2c96db776ffa928321c4ae47d9e259b0674c56f74
-
SSDEEP
12288:nsS4mTRSW917Y86SHIStoYOZi7DG5gUSLs/QSSs3tfR+Zq6k6i21tyBJ:ZSW9JY8/HIqLXG8Ls/LSs3tJ+xixJ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdf5654356230caf2e19f5cf447426fb
Files
-
cdf5654356230caf2e19f5cf447426fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 621KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE