Behavioral task
behavioral1
Sample
c1e407846cb62f854bbd08978dc1cd0c5c3ef32d5b89222b361c79b3b72bfc7d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c1e407846cb62f854bbd08978dc1cd0c5c3ef32d5b89222b361c79b3b72bfc7d.exe
Resource
win10v2004-20240802-en
General
-
Target
c1e407846cb62f854bbd08978dc1cd0c5c3ef32d5b89222b361c79b3b72bfc7d
-
Size
4.3MB
-
MD5
bf997cf7d9ee3760d9d449d1f5db4503
-
SHA1
b5dbf742464feb29c02a6e67c9addedb7803cab7
-
SHA256
c1e407846cb62f854bbd08978dc1cd0c5c3ef32d5b89222b361c79b3b72bfc7d
-
SHA512
5f0e9226e95ca942b01d77f6024cb428270795efd3875f5201d5be06975067fb33988f5fb7c6dfd08aa132a7e8850190e35133ecae1caea7adc2212456fa6f9a
-
SSDEEP
98304:fF3zG2XrMar1OHy9FC2A2j2GQ2tkcTDb8hMn:fFy2IaZOHAFpCGtb8h
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1e407846cb62f854bbd08978dc1cd0c5c3ef32d5b89222b361c79b3b72bfc7d
Files
-
c1e407846cb62f854bbd08978dc1cd0c5c3ef32d5b89222b361c79b3b72bfc7d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 238KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4.1MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE