Behavioral task
behavioral1
Sample
7d5272e94f1cd48c557e3ca90baf3160043aeb11aa0f689152ceb543b93e6701.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7d5272e94f1cd48c557e3ca90baf3160043aeb11aa0f689152ceb543b93e6701.exe
Resource
win10v2004-20230915-en
General
-
Target
7d5272e94f1cd48c557e3ca90baf3160043aeb11aa0f689152ceb543b93e6701
-
Size
9.9MB
-
MD5
a961cda57e3e93daa2775837dbb2431a
-
SHA1
da79c14dd68ed976e2911a458728ecb0be86299a
-
SHA256
7d5272e94f1cd48c557e3ca90baf3160043aeb11aa0f689152ceb543b93e6701
-
SHA512
4a7a54612bf90a0602000d39bc86c7abe65d685ab87fa2ec37e86f0e915d8039b518396824a8cf1d8710bb859aca09f97a21f180b4cf31516502a544ff5d39cb
-
SSDEEP
196608:PH+Qiba6ND+YBz/hTpVM76rTjtx2gWqWB0h4RvKXHZLSkqAvLyX7kB3:fLG3NDL/hTM76rTjn2gEB0h3HwrXk
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d5272e94f1cd48c557e3ca90baf3160043aeb11aa0f689152ceb543b93e6701
Files
-
7d5272e94f1cd48c557e3ca90baf3160043aeb11aa0f689152ceb543b93e6701.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 666KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9.2MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 59KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE