Behavioral task
behavioral1
Sample
de664aa1a00de17e9fb36907ca192364.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de664aa1a00de17e9fb36907ca192364.exe
Resource
win10v2004-20240226-en
General
-
Target
de664aa1a00de17e9fb36907ca192364
-
Size
328KB
-
MD5
de664aa1a00de17e9fb36907ca192364
-
SHA1
d97e47f1b04e388e0e13cf4ff82a29668190d291
-
SHA256
ca85d60a938fd6fe0b141f2c4f448b0eec1a24bf5d5ada2539a81a05fd84d68a
-
SHA512
c0810efa383d9b784908262988e00078ab01e87d1cbf3e06c9bf1f0e5facfd5a61aa222c95855d41534ff5459e62619fd9294167c919c0db96114d0217f30d6f
-
SSDEEP
6144:/v/QcAjqW9VzdfP3cvu4rO+hHwZdq5q0vTV9Fkl0KP+Tb1V:/Qcu7zd3jB+hHwZdOvR4f
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de664aa1a00de17e9fb36907ca192364
Files
-
de664aa1a00de17e9fb36907ca192364.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE