Behavioral task
behavioral1
Sample
c8ccb386b806953c6c2bb6ddfc73fa18a5f49358dda4c4c6aa5a60337a556e66.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c8ccb386b806953c6c2bb6ddfc73fa18a5f49358dda4c4c6aa5a60337a556e66.exe
Resource
win10v2004-20240508-en
General
-
Target
c8ccb386b806953c6c2bb6ddfc73fa18a5f49358dda4c4c6aa5a60337a556e66
-
Size
707KB
-
MD5
0e627dfa5289925a5ee8e5fdca719fa9
-
SHA1
7b2a7157987405179b05c55094deb6065d299b00
-
SHA256
c8ccb386b806953c6c2bb6ddfc73fa18a5f49358dda4c4c6aa5a60337a556e66
-
SHA512
f89c30c210a86ae55b2747bf38dcd4466a8b2051faabb3b071113bd646220649d66fb2a5f83506949007396825a7b5441f8b3c2e7ce4c204c06c26f1e519046d
-
SSDEEP
12288:bvc8M1zqEuc0DSH4e3q7L3DDfEG1x4B005wntkCa:bv2tuc0D64nvEGc0ke
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ccb386b806953c6c2bb6ddfc73fa18a5f49358dda4c4c6aa5a60337a556e66
Files
-
c8ccb386b806953c6c2bb6ddfc73fa18a5f49358dda4c4c6aa5a60337a556e66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 374KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata0 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 2KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE