Behavioral task
behavioral1
Sample
??????.exe
Resource
win7-20240508-en
General
-
Target
4d969f98a7dbc486644def9170d81dabb25cb8228d2097da076de805833db2df
-
Size
13.1MB
-
MD5
502174b243ece86541f68d5757badf62
-
SHA1
59e6b01c1ab57d48a9e1a91986c65e320f000aa5
-
SHA256
4d969f98a7dbc486644def9170d81dabb25cb8228d2097da076de805833db2df
-
SHA512
f313afade587ad9ccaaa1400e6b0aa8a1321e3d8bd7693a2e40647bcce787851508c877e71f0b2a1bba4a6411efe90578936503857f7b75e0bccc0ad9e8e069e
-
SSDEEP
393216:Fv5Crp0nzTy0phSSsyV0kEvpW8cPHfu7pD72Od:ThpEdyCi/mpuOd
Malware Config
Signatures
-
resource yara_rule static1/unpack002/??????.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/??????.exe
Files
-
4d969f98a7dbc486644def9170d81dabb25cb8228d2097da076de805833db2df.zip
-
?????????/???360???????????.txt
-
?????????/?????????.zip.zip
-
??????.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 272KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 615KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE