Behavioral task
behavioral1
Sample
393a45e413cc72ca9d91b59e77cbfce17c6831e84598553ec856d2116b1c1dd2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
393a45e413cc72ca9d91b59e77cbfce17c6831e84598553ec856d2116b1c1dd2.exe
Resource
win10v2004-20240508-en
General
-
Target
393a45e413cc72ca9d91b59e77cbfce17c6831e84598553ec856d2116b1c1dd2
-
Size
7.0MB
-
MD5
c26fd9e0823d869a2c165eba12217435
-
SHA1
aac1c424e8ee586390239a766787c69356276e55
-
SHA256
393a45e413cc72ca9d91b59e77cbfce17c6831e84598553ec856d2116b1c1dd2
-
SHA512
35cb00854c42da83441f4cae56bc8dee9b890b6e8715dd092b63ee70f127b88536e75f97313e67563a8940ffbab7d57e9a006ac51668d3189270eb54d0347876
-
SSDEEP
196608:6agXH36Iydc1IAxHbG6rjY1mnuBQ9hNslM2Nd4/4n49YW:D0X6IzeANC6PYQgQzGlhH4/C4iW
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 393a45e413cc72ca9d91b59e77cbfce17c6831e84598553ec856d2116b1c1dd2
Files
-
393a45e413cc72ca9d91b59e77cbfce17c6831e84598553ec856d2116b1c1dd2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 377KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 105KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 51KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE