Behavioral task
behavioral1
Sample
7dec9b8f883e31a972f4a5b2731623b936a6372e3f36649bd256de7a12ba3243.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
7dec9b8f883e31a972f4a5b2731623b936a6372e3f36649bd256de7a12ba3243.exe
Resource
win10v2004-20230621-en
General
-
Target
7dec9b8f883e31a972f4a5b2731623b936a6372e3f36649bd256de7a12ba3243
-
Size
926KB
-
MD5
babfc97d249047c6a56f4cf2693e1eea
-
SHA1
d9af7a3e08464480cce528d290b23f97063d9dbf
-
SHA256
7dec9b8f883e31a972f4a5b2731623b936a6372e3f36649bd256de7a12ba3243
-
SHA512
fd82b143b2b4b6a53b42cf8811dd5630b9f894375418ecb7eee4181e95c05b622587ed31e72388609feda4a57531b258e6414beb17b86612f3b181dc3f7ebe5c
-
SSDEEP
12288:mCWAgK7+OPpibO9Ntm0gpy456IElQUnByNfJvSdfDzNSjYcwhtGL0iIzg:aYqsNtm0ggiaQ0BybvinmYSLO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dec9b8f883e31a972f4a5b2731623b936a6372e3f36649bd256de7a12ba3243
Files
-
7dec9b8f883e31a972f4a5b2731623b936a6372e3f36649bd256de7a12ba3243.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 496KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 84KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�w Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE