Static task
static1
Behavioral task
behavioral1
Sample
234ff22f3f4ec22abd3f404e8441bca2b092faae5c32126a9e624bd1a6dc618c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
234ff22f3f4ec22abd3f404e8441bca2b092faae5c32126a9e624bd1a6dc618c.exe
Resource
win10v2004-20240426-en
General
-
Target
234ff22f3f4ec22abd3f404e8441bca2b092faae5c32126a9e624bd1a6dc618c
-
Size
811KB
-
MD5
25929959df5c8e63e13137f50cf46907
-
SHA1
02462b451330897b0d98761cb4dcef97df3098a5
-
SHA256
234ff22f3f4ec22abd3f404e8441bca2b092faae5c32126a9e624bd1a6dc618c
-
SHA512
728dccba7d0e28b9f6ed79fc672df816692a321e45c8310db59be375db53f9a89db795e6f298d7868701a3a75939320711b1f081d41d68c52ba59c35cb14740b
-
SSDEEP
6144:Buj8NDF3OR9/Qe2HdklrSqjzQtJnjqno2k29PR:wOF3ORK3d9QzQtJnjqno2k29PR
Malware Config
Signatures
-
Detects executables packed with ASPack 1 IoCs
Processes:
resource yara_rule sample INDICATOR_EXE_Packed_ASPack -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 234ff22f3f4ec22abd3f404e8441bca2b092faae5c32126a9e624bd1a6dc618c
Files
-
234ff22f3f4ec22abd3f404e8441bca2b092faae5c32126a9e624bd1a6dc618c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE