Behavioral task
behavioral1
Sample
715269315201fe2609d1b52bef529f5b12d14920b9a74cc06a11869e2cc5e797.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
715269315201fe2609d1b52bef529f5b12d14920b9a74cc06a11869e2cc5e797.exe
Resource
win10v2004-20230220-en
General
-
Target
715269315201fe2609d1b52bef529f5b12d14920b9a74cc06a11869e2cc5e797
-
Size
3.8MB
-
MD5
524e6ecdb66c6737e2e17a7136c8035f
-
SHA1
a0940c99da72bacfd16ac38db8c4908e3b3e8582
-
SHA256
715269315201fe2609d1b52bef529f5b12d14920b9a74cc06a11869e2cc5e797
-
SHA512
5416114c5ebd492935d6a63c7554eb31ae2de77811fdf1507491478601d9d82da30ea23e6d95b5edb6ae369766fd167e79080b59393372fd6fd7566e9ac7c148
-
SSDEEP
98304:G1KqiQESyl72HzFJSPY4wdwtS7hX5ctrG0IqdTr878o2fgD:7qiQfy0twc7Z5uy01dTriigD
Malware Config
Signatures
-
Processes:
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 715269315201fe2609d1b52bef529f5b12d14920b9a74cc06a11869e2cc5e797
Files
-
715269315201fe2609d1b52bef529f5b12d14920b9a74cc06a11869e2cc5e797.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3.1MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 52KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 613KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE