Behavioral task
behavioral1
Sample
5823f27c31ec486ac862645e313dc543f3b83ab1266872d42bdbf3fc94b829b6.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5823f27c31ec486ac862645e313dc543f3b83ab1266872d42bdbf3fc94b829b6.exe
Resource
win10v2004-20240802-en
General
-
Target
99e543979c06859f208428542e591d1e.zip
-
Size
360KB
-
MD5
e9367c0f34f9666fa9a0c2ae425a69b9
-
SHA1
57ee59fbe0a31cb6e8ceab688f0ae3bab7ee72e8
-
SHA256
e81377ce84c6e4fadfc1f371bebce1a3d6b57ea2d415507f38b7d022c313b636
-
SHA512
b5f7f43603b5f6dff9da1ba5e237a8fea9f7efa3b1104c3c5b0d859191660479d9eca64b2f046b58890e9baedfffd4cdcf138367fe40391fe7340850f17005d8
-
SSDEEP
6144:BMC7DmQUbYv+h3gCQgWXoAk2aaqMGRdl9CFrLNKto8kfbxRfyre4g0r/T39HO:BMC7YY2BVPRZhl9CpNOo5fbxUrUwY
Malware Config
Signatures
-
resource yara_rule static1/unpack001/5823f27c31ec486ac862645e313dc543f3b83ab1266872d42bdbf3fc94b829b6 aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5823f27c31ec486ac862645e313dc543f3b83ab1266872d42bdbf3fc94b829b6
Files
-
99e543979c06859f208428542e591d1e.zip.zip
Password: infected
-
5823f27c31ec486ac862645e313dc543f3b83ab1266872d42bdbf3fc94b829b6.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE