Behavioral task
behavioral1
Sample
9283dcfe0847e44077d789ddee409f78b120c5a65ba2e3eaa3404721d6fb9b75.exe
Resource
win7-20230712-en
General
-
Target
9283dcfe0847e44077d789ddee409f78b120c5a65ba2e3eaa3404721d6fb9b75
-
Size
205KB
-
MD5
e20ab554bdcfbe5fc7c302b008a39b1f
-
SHA1
916269b34a8435515a3ce0a403a3abfcec09a30c
-
SHA256
9283dcfe0847e44077d789ddee409f78b120c5a65ba2e3eaa3404721d6fb9b75
-
SHA512
f732395c9277db91d2c1456bccac496ad3bba01ff972dab5cfbf764ccee843e4aa2d9d43564a569c6fab22f6d1f2ffd7d6e868902489982d27a92e3812b4e737
-
SSDEEP
6144:iwswJ8O63HUhMCshV0Ep+gLIMfAU/XBcRSsL:qwJ8pHUhMVUO+gD/BcEI
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9283dcfe0847e44077d789ddee409f78b120c5a65ba2e3eaa3404721d6fb9b75
Files
-
9283dcfe0847e44077d789ddee409f78b120c5a65ba2e3eaa3404721d6fb9b75.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 78KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcgfe Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE