Behavioral task
behavioral1
Sample
d48a7ebd89821f2a8185102f588d68bb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d48a7ebd89821f2a8185102f588d68bb.exe
Resource
win10v2004-20240226-en
General
-
Target
d48a7ebd89821f2a8185102f588d68bb
-
Size
44KB
-
MD5
d48a7ebd89821f2a8185102f588d68bb
-
SHA1
47fac868e8bcbae8cd6f572501474ab107a070fa
-
SHA256
ce9c0f8e6b9d579d31489b7e6e3c8dcc118febc3bc553d9e83b31b3eb469e469
-
SHA512
11a1ae66c0c4fc071703196d9b0198154c959cfa3d694da18911140274ffc45712487e30d8af9fae0147e7e9ab796ecec6b26e458f05e24b70a7caf1dc583f25
-
SSDEEP
768:xuklEyJc1k/v4iCT6GUKYIBuKdc++HXszurXE5MdIC4x6deV:UuRW1k/giu6qYIBPdcZHXszMU5SIs
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d48a7ebd89821f2a8185102f588d68bb
Files
-
d48a7ebd89821f2a8185102f588d68bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 33KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE