Behavioral task
behavioral1
Sample
64ce17b5f38fbff69572009d4ce615b2bd4e04ee25c2b6032381e075b38f6fac.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
64ce17b5f38fbff69572009d4ce615b2bd4e04ee25c2b6032381e075b38f6fac.exe
Resource
win10v2004-20240508-en
General
-
Target
64ce17b5f38fbff69572009d4ce615b2bd4e04ee25c2b6032381e075b38f6fac
-
Size
14.0MB
-
MD5
09ecf75bbbbc00a771535c3a704c4b90
-
SHA1
070a2ddfda5f5615561c40f72be0aa28b55f667d
-
SHA256
64ce17b5f38fbff69572009d4ce615b2bd4e04ee25c2b6032381e075b38f6fac
-
SHA512
9c925b71457f980f1e1a1c31c4d3f937f8b4734924bd07b011946faf7fe1c91c369f7d6195ce02e705e74052893c205496f6334d070b10790e936c3797f39f9c
-
SSDEEP
393216:hdhm0VC3pYPWv/lnc5mqmFC5p/9tpOjGr2gU:heUxPWXlnc5LBXpOjGrZU
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64ce17b5f38fbff69572009d4ce615b2bd4e04ee25c2b6032381e075b38f6fac
Files
-
64ce17b5f38fbff69572009d4ce615b2bd4e04ee25c2b6032381e075b38f6fac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 406KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9.0MB - Virtual size: 13.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 29KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wlS Size: 580KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE