Behavioral task
behavioral1
Sample
af07bef7c7fc607283d390544353f8c26f12159c018ff06e9323ede3f9b7c14f.exe
Resource
win7-20231020-en
General
-
Target
af07bef7c7fc607283d390544353f8c26f12159c018ff06e9323ede3f9b7c14f
-
Size
11.2MB
-
MD5
e4974b3cbe8e524a78140c7a93e99a0d
-
SHA1
e5ca6994fda1904de251e74de2fd7eed9bba3968
-
SHA256
af07bef7c7fc607283d390544353f8c26f12159c018ff06e9323ede3f9b7c14f
-
SHA512
2cf20fe9fa57b4d7042f573c70b4245205eea8e63c7be286244668a85db05d7623b684926b9742bc7d0d85999ae8643bd5791e17270afcf1b951dc8e3e49c5ab
-
SSDEEP
196608:ICUeTvVXpc/9VF2rqY8XBZkh8+7RdpJyXtcznVxKNy/h6C7LYrInfOLldGSqd9IQ:SCNpc/zF/xRUV1wcOy/sCbcU9j9
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af07bef7c7fc607283d390544353f8c26f12159c018ff06e9323ede3f9b7c14f
Files
-
af07bef7c7fc607283d390544353f8c26f12159c018ff06e9323ede3f9b7c14f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 544KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10.4MB - Virtual size: 20.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE