Behavioral task
behavioral1
Sample
c5b7b6a3e8f9c2c05e2562efd22c07ee857dc3c4ac189f93a92f0b308f3d8508.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c5b7b6a3e8f9c2c05e2562efd22c07ee857dc3c4ac189f93a92f0b308f3d8508.exe
Resource
win10v2004-20240508-en
General
-
Target
c5b7b6a3e8f9c2c05e2562efd22c07ee857dc3c4ac189f93a92f0b308f3d8508
-
Size
7.2MB
-
MD5
9bdf605eabcb5dd2f7eba288dcde1c6a
-
SHA1
b41d7685b61690ad347aee9a6e065685ab68ad1d
-
SHA256
c5b7b6a3e8f9c2c05e2562efd22c07ee857dc3c4ac189f93a92f0b308f3d8508
-
SHA512
324e9a92ee38ec1bc201ee2220556eb1a6d0597d3d2f1960a40bdcdabbba156026b14368299b67990f7ad5ff033766f686f076a1edc6f071788a58e13187145b
-
SSDEEP
196608:OR36Iydc1IAxHbG6rjYt2jqadD2MQFDOQGp:Od6IzeANC6PYSdD2tFDGp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5b7b6a3e8f9c2c05e2562efd22c07ee857dc3c4ac189f93a92f0b308f3d8508
Files
-
c5b7b6a3e8f9c2c05e2562efd22c07ee857dc3c4ac189f93a92f0b308f3d8508.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 375KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 104KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE