Behavioral task
behavioral1
Sample
7e4d43065f1bdbb10e1c9756d434ef1704c7ba471f98826631935eaffb037a8d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7e4d43065f1bdbb10e1c9756d434ef1704c7ba471f98826631935eaffb037a8d.exe
Resource
win10v2004-20230220-en
General
-
Target
7e4d43065f1bdbb10e1c9756d434ef1704c7ba471f98826631935eaffb037a8d
-
Size
560KB
-
MD5
8aee313aa880039fffeb39f7193f29cc
-
SHA1
b6e5b1a5e0f9ef12dcbe31e27794cd340236ea0c
-
SHA256
7e4d43065f1bdbb10e1c9756d434ef1704c7ba471f98826631935eaffb037a8d
-
SHA512
6074b52050ff4550ef9b9a5e4c26319346c798995c82553c8f62d6c5a541666d8c971b4be55b73eeeee8dc08360a80765f04c288b058c3b9196d9f287ee4ae9f
-
SSDEEP
6144:0AOL4w3+HrDkbyxZ+t03enXL83lZf8D9D8/yfJ40Jl:0h4wM9Z+t8XZ0xll
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7e4d43065f1bdbb10e1c9756d434ef1704c7ba471f98826631935eaffb037a8d
Files
-
7e4d43065f1bdbb10e1c9756d434ef1704c7ba471f98826631935eaffb037a8d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 236KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 22KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE