Behavioral task
behavioral1
Sample
4aa8213f397fe2392f7cc6892fa900a703e6fcdd5089c6d368f9efb7ba198686.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4aa8213f397fe2392f7cc6892fa900a703e6fcdd5089c6d368f9efb7ba198686.exe
Resource
win10v2004-20230703-en
General
-
Target
4aa8213f397fe2392f7cc6892fa900a703e6fcdd5089c6d368f9efb7ba198686
-
Size
951KB
-
MD5
758777872feeb1d6f6f75398e92f76aa
-
SHA1
964ad1f95f34845ea55cb3c9e026dbd47199875f
-
SHA256
4aa8213f397fe2392f7cc6892fa900a703e6fcdd5089c6d368f9efb7ba198686
-
SHA512
c4680d24c3dbb3bdd977f270bfb0b53e811c73c2859aa043877fcaa7a7bea52f741a56a1ba34868bea3a4aa78ff8f522e97b7a853a28552c3787a111f4fa226c
-
SSDEEP
24576:Ptf38fhTHFUf9ln8/V/wmE3kSVHpgpkE:1MJlKyVVWFm
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aa8213f397fe2392f7cc6892fa900a703e6fcdd5089c6d368f9efb7ba198686
Files
-
4aa8213f397fe2392f7cc6892fa900a703e6fcdd5089c6d368f9efb7ba198686.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 519KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE