Behavioral task
behavioral1
Sample
e02b63327bc8a284610f119b780b2fde.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e02b63327bc8a284610f119b780b2fde.exe
Resource
win10v2004-20240226-en
General
-
Target
e02b63327bc8a284610f119b780b2fde
-
Size
824KB
-
MD5
e02b63327bc8a284610f119b780b2fde
-
SHA1
bb6f5273f2a174ca7a393d1de3c4f1cf217948d9
-
SHA256
08c1a1ede6edfe06580683db90bc7a267b20a68a22f070e49114e3283c23ed53
-
SHA512
2581ec695229d74e83b076b5ea42b294ed6f861197e3031ab0a0420f5a27942655304afa7c23605e6b1f62506b1e2a290845409cd978774ffc4f715ce8880ebd
-
SSDEEP
12288:9ZOay672az45ESKmPKJfRChbGQjGF/6oSzmw/IL48KAsOXCWc:iPK14GkG5Nb7L48rsmv
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e02b63327bc8a284610f119b780b2fde
Files
-
e02b63327bc8a284610f119b780b2fde.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 372KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMG Size: 433KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE