Behavioral task
behavioral1
Sample
838086ed8b4207c84b7c179a283d8cfe128e7e3c50a0073d96c26764f782742d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
838086ed8b4207c84b7c179a283d8cfe128e7e3c50a0073d96c26764f782742d.exe
Resource
win10v2004-20240802-en
General
-
Target
bc11c246b1ffe4e88999de6fe757b2a2.zip
-
Size
713KB
-
MD5
97b79a973e5625846d54d94030302a61
-
SHA1
c7848cf862dd5662c41a83b4ea7fa6c3fd6c3d0c
-
SHA256
b8d5b2a288bd2a9efd6634332360a47b06022e14ef63ce9b7f379c58131d8e82
-
SHA512
773dbf21cce1b04b05f184e2fb1bcb8a88803f447900684992b69338d94167f42cacc1b7c27db3c2f6af36662a0e2479fa7386de1407078dd5e167b5bb4905e6
-
SSDEEP
12288:Nrh7IKCB4OLZVcW9oKAmtcuH5FcheZv/we3DprrH0ltaJkt02UvAmxw7y:N17IRe6XxF8eRwADxSZyomxw7y
Malware Config
Signatures
-
resource yara_rule static1/unpack001/838086ed8b4207c84b7c179a283d8cfe128e7e3c50a0073d96c26764f782742d aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/838086ed8b4207c84b7c179a283d8cfe128e7e3c50a0073d96c26764f782742d
Files
-
bc11c246b1ffe4e88999de6fe757b2a2.zip.zip
Password: infected
-
838086ed8b4207c84b7c179a283d8cfe128e7e3c50a0073d96c26764f782742d.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE