Behavioral task
behavioral1
Sample
3c3c524b4214e08c03c25dc3c883278b3dc39be26d3a72b4f41b4512b3e15f91.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c3c524b4214e08c03c25dc3c883278b3dc39be26d3a72b4f41b4512b3e15f91.exe
Resource
win10v2004-20240730-en
General
-
Target
3c3c524b4214e08c03c25dc3c883278b3dc39be26d3a72b4f41b4512b3e15f91
-
Size
6.1MB
-
MD5
2ede6e5a4e78de8baf880cc513570a74
-
SHA1
c5105ecc470015a22142bea85a8332988459f5ac
-
SHA256
3c3c524b4214e08c03c25dc3c883278b3dc39be26d3a72b4f41b4512b3e15f91
-
SHA512
fcf1dfc999244a8cd90667ae23b301c63d844a3fc706781631f45178768abfd530b86f193d268b2f93af6926e1c294a77e256dc354c863975c96ea642f07d498
-
SSDEEP
196608:/dp3ZOK3XomRz+cJVBgLyfoKPYLo4IqYRFawBuIk8B:/dp3ZOKHoITJV6mfoKgwA4tk8
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c3c524b4214e08c03c25dc3c883278b3dc39be26d3a72b4f41b4512b3e15f91
Files
-
3c3c524b4214e08c03c25dc3c883278b3dc39be26d3a72b4f41b4512b3e15f91.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.1MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data: Size: 490KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.2MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 186KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE