Behavioral task
behavioral1
Sample
7514434531822f2719a99e4f8f262e0706010ca185f04feeca7a9082c661e32a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7514434531822f2719a99e4f8f262e0706010ca185f04feeca7a9082c661e32a.exe
Resource
win10v2004-20230915-en
General
-
Target
7514434531822f2719a99e4f8f262e0706010ca185f04feeca7a9082c661e32a
-
Size
674KB
-
MD5
302c46f1b8ca99f31304ce85d31bf49b
-
SHA1
7df34b07bcb8f5c8f56383887e2af536b754da3d
-
SHA256
7514434531822f2719a99e4f8f262e0706010ca185f04feeca7a9082c661e32a
-
SHA512
194fc4181a7c1b6380938c4d46af5114adb68a839b0aa8ab80de82d06eaea79a021b71b8d46be3a894d50fadfeb32689031ad365c344fb492f22e399a09c1f40
-
SSDEEP
12288:0fvvzli4FUSFspBCzNM9FPLc6nujcwT+j9OhcwEXxmwYeLTcBJ/jeqm71YwVey8J:0fnlUSOrzFPwcwT+mcwJeLA//ja1YwVS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7514434531822f2719a99e4f8f262e0706010ca185f04feeca7a9082c661e32a
Files
-
7514434531822f2719a99e4f8f262e0706010ca185f04feeca7a9082c661e32a.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 344KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 3KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 271KB - Virtual size: 38.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE