Behavioral task
behavioral1
Sample
c5c396c886957500a079ad3e93b3fac0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c5c396c886957500a079ad3e93b3fac0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c5c396c886957500a079ad3e93b3fac0N.exe
-
Size
83KB
-
MD5
c5c396c886957500a079ad3e93b3fac0
-
SHA1
1f4be0943d76f19b9279481e2cdcce66671b1797
-
SHA256
ce3bc996e33693f2b58925cb47b9956b558cd839b326b0e79d51ce63e7c68ee8
-
SHA512
c04afbe7df4fbf97b7ad6d1c30f4ce0a23f38a9502b06907fe6fb6b61f6969170ddfe7798a92533117122c1ac8729c955e4910b326840b85c4fb52c1909d98c4
-
SSDEEP
1536:QZLFJmkx22UsfAKgIt35TSY178E52nVS47ZA6UyeYVP4Xwk9TbXj8QDo4CoZD:QFJ7xdbAK9kYR8znVS47fUz8KPXj8QDT
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5c396c886957500a079ad3e93b3fac0N.exe
Files
-
c5c396c886957500a079ad3e93b3fac0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE