Behavioral task
behavioral1
Sample
e14f84bcf291230d92fb70c5f445adcc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e14f84bcf291230d92fb70c5f445adcc.exe
Resource
win10v2004-20231215-en
General
-
Target
e14f84bcf291230d92fb70c5f445adcc
-
Size
138KB
-
MD5
e14f84bcf291230d92fb70c5f445adcc
-
SHA1
c95a2b23e5cd20c7f36c99a549c111276cc911e0
-
SHA256
fc0593a5011210b71975dd6d041f653b8616ac36011fb6b19a26b976a5e319ce
-
SHA512
9b7e6fa44c8c38e4c3403a8ba2cef7b410a3c3f047f66ba0ff1a0c6a2a3fd0f16d4185d7c43fc9967abcfc3f093441cc8b8c6810eaaeeddf7b7c86160c9e6ef0
-
SSDEEP
3072:NMcWzYorGrQYdfuOG0G0B2rFXnExeUbVpq9kU9GUjRMtKJHCShjj:PsYorGppkrPZXeXklGYRJiShj
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e14f84bcf291230d92fb70c5f445adcc
Files
-
e14f84bcf291230d92fb70c5f445adcc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 131KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE