Behavioral task
behavioral1
Sample
909b095e0cbc78289d41f0472ce945bc6d10e1b5f66edc9068294a8ea81688b7.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
909b095e0cbc78289d41f0472ce945bc6d10e1b5f66edc9068294a8ea81688b7.exe
Resource
win10v2004-20240508-en
General
-
Target
909b095e0cbc78289d41f0472ce945bc6d10e1b5f66edc9068294a8ea81688b7
-
Size
9.1MB
-
MD5
4ee84cecd30ab9a466249d90e9e7a5c0
-
SHA1
0eb9367628d945d14520d07a1a73e7f3362ac326
-
SHA256
909b095e0cbc78289d41f0472ce945bc6d10e1b5f66edc9068294a8ea81688b7
-
SHA512
5663b6e3010af3c6bde20f3c81160c2c0297a58c1b52aa1dd4f5f3f557c7e50cd80757c5721f8ca0c8a726aa1cf6f1a5ebd040979a4b76f0ebdf380c017b914f
-
SSDEEP
196608:BDQTKYDwRsdOexFnNwJraawfy4y4JZ2l5uypOimcR0d:0zBjxFnuNady4LGBpOi0d
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 909b095e0cbc78289d41f0472ce945bc6d10e1b5f66edc9068294a8ea81688b7
Files
-
909b095e0cbc78289d41f0472ce945bc6d10e1b5f66edc9068294a8ea81688b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 541KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.3MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 38KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE