Behavioral task
behavioral1
Sample
d5475c26e2858a856a4aed20f974a318.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5475c26e2858a856a4aed20f974a318.exe
Resource
win10v2004-20240226-en
General
-
Target
d5475c26e2858a856a4aed20f974a318
-
Size
2.8MB
-
MD5
d5475c26e2858a856a4aed20f974a318
-
SHA1
aa989201813ee57abd5b94572a0a57244f790539
-
SHA256
687efbff83c47a1e1aa97f0aa097244978a4f57f444d6647df9ff9407718ff84
-
SHA512
4c1cf0f45898ca3c13824c29a5734e9cf9b6d0673257060a2e622c568227a88be8b6d6cdae064f9e3c76a4af6ddd5b304a9c276ba13db69a6ec7c7fb4933edb0
-
SSDEEP
49152:LSUF5Km11liqivRDbc/h/qIIzFHQgOtQpF0KEzkLpJKAfl6G0Ivus1kt/Jo:LSAj0qivNctZoHOeTrLrKAt70E+t/Jo
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5475c26e2858a856a4aed20f974a318
Files
-
d5475c26e2858a856a4aed20f974a318.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 303KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.5MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE