Behavioral task
behavioral1
Sample
1b7e896cc608ba93280cd239c7b40547025958f71d09a9e00b0ef0e023009305.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b7e896cc608ba93280cd239c7b40547025958f71d09a9e00b0ef0e023009305.exe
Resource
win10v2004-20240426-en
General
-
Target
1b7e896cc608ba93280cd239c7b40547025958f71d09a9e00b0ef0e023009305
-
Size
9.3MB
-
MD5
72c90282ba340c324ed567ec84501efa
-
SHA1
9d0346b45494dd9be0b09dc9b9b6f3f142306385
-
SHA256
1b7e896cc608ba93280cd239c7b40547025958f71d09a9e00b0ef0e023009305
-
SHA512
cc728e9709f4586f852aaae47493fe758755180c11354f77cd13b3ceaf2c46517e9c65d13a93a44e79a905b97b2a2194af393106e29fe5f27a83169a35ff1fe6
-
SSDEEP
196608:59h64hvD5tQ5cU9CiMkmCxI5NdHv2XTV8tIHW77P989xl7W8vzuHf:57LH6cRiP7I5LAuGHwj8xlHq
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b7e896cc608ba93280cd239c7b40547025958f71d09a9e00b0ef0e023009305
Files
-
1b7e896cc608ba93280cd239c7b40547025958f71d09a9e00b0ef0e023009305.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 784KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 115KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.4MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE