Behavioral task
behavioral1
Sample
c4a1ee909fdcc204ee6b8b6611a2d96bb0869b79537421cadea4123f048d0e45.exe
Resource
win7-20231023-en
General
-
Target
c4a1ee909fdcc204ee6b8b6611a2d96bb0869b79537421cadea4123f048d0e45
-
Size
325KB
-
MD5
c6de946b165cd7fc4162842de5e46780
-
SHA1
221434816f144aeaa3c2d0a29a0c7240762476c7
-
SHA256
c4a1ee909fdcc204ee6b8b6611a2d96bb0869b79537421cadea4123f048d0e45
-
SHA512
5a3b7ff2ecf8d0b2efffb7cbfb5a04ad68cede668dbbcebff71f223caffcee764a8fa833a53f7c2abb92225860852a45e5332e98ad988551fd643bbe894bfba6
-
SSDEEP
6144:kjgmK5JHjAovEAOelgqGcIA8pUHRKexpKuHbQwtGv9fC9PFD:7JbHjROgg1VUxKex8+GVePF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4a1ee909fdcc204ee6b8b6611a2d96bb0869b79537421cadea4123f048d0e45
Files
-
c4a1ee909fdcc204ee6b8b6611a2d96bb0869b79537421cadea4123f048d0e45.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 253KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE