Behavioral task
behavioral1
Sample
ded0306c70cbe49246be59433ed28659.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ded0306c70cbe49246be59433ed28659.exe
Resource
win10v2004-20240226-en
General
-
Target
ded0306c70cbe49246be59433ed28659
-
Size
825KB
-
MD5
ded0306c70cbe49246be59433ed28659
-
SHA1
2c6c9b769884a52c86e747ee523787e59aadf107
-
SHA256
e937849b8b6a80413cd757f4d50582772e96b923789f4fe76fa57e33db6fe34f
-
SHA512
87316a1e2f7e0aed06969f81c4b4bb0ab107efc5b80cd065a48230b6bd531bfd61f0359eea2bece0fee94d7d9884c83c094ced9447f5d0ccc9164450169fa334
-
SSDEEP
24576:C6soLYlAduSXAri+r6E1L1hliW/1E/9SA0:+oLYRSwri1GxTiW/DA0
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ded0306c70cbe49246be59433ed28659
Files
-
ded0306c70cbe49246be59433ed28659.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecode Size: 94KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE