Behavioral task
behavioral1
Sample
61ea23f465f2ddf6190355f42184708781df1030d162690b6c9716ff20e9c35d.exe
Resource
win7-20231020-en
General
-
Target
61ea23f465f2ddf6190355f42184708781df1030d162690b6c9716ff20e9c35d
-
Size
3.0MB
-
MD5
6ff9687fc6d89ddb8f84659d3c2b6249
-
SHA1
2fc9ee5e30e5f01344564fd71ad7ccbb47ee6523
-
SHA256
61ea23f465f2ddf6190355f42184708781df1030d162690b6c9716ff20e9c35d
-
SHA512
ba2b7958a0bdbb463db7754dce4d5c2e6530c46afc104aee8be8d273bbfa7e42fdda97c0eefbdd7f5c0dd676676dfd7d40be5fa118cf9e01420511165299eb07
-
SSDEEP
49152:cJ/pOqkQnRmJyT+w5+Tcc6LZVCtmtmlaUK8m/Kt/dMbdXgq9McuhzEYLXCGLcv7H:clpOqkQnE++U+Tcc6NVCtmtmVfyKtguy
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61ea23f465f2ddf6190355f42184708781df1030d162690b6c9716ff20e9c35d
Files
-
61ea23f465f2ddf6190355f42184708781df1030d162690b6c9716ff20e9c35d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 887KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VMP Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE