Behavioral task
behavioral1
Sample
7a8f9e5b8f7aaafbd6fd4f9f874b2352.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a8f9e5b8f7aaafbd6fd4f9f874b2352.exe
Resource
win10v2004-20231215-en
General
-
Target
7a8f9e5b8f7aaafbd6fd4f9f874b2352
-
Size
91KB
-
MD5
7a8f9e5b8f7aaafbd6fd4f9f874b2352
-
SHA1
4f828c3825db4d6b3c0a1d9fdef60e4f0e5f76fe
-
SHA256
e11bc59939d6cecb0c65271e70e6f4e25fd774a7614ede8401ef8796b9f2b75c
-
SHA512
5b23e831ca069b86d3f63ad8485186177046861b7edb400fdecfbc9bb936fdced250ac585d614b85b9e21b1ed35a245fbc240f038f6cedb00a74b7ee74c25d7a
-
SSDEEP
1536:Tqb28YwCSBEbY5Q1Qo3/a9VNJq4IaiuE6wuvVphWW0W0Ryg3WO:fwCPQo3/a9VNJq4Ijx6wuvHhR0W0FGO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a8f9e5b8f7aaafbd6fd4f9f874b2352
Files
-
7a8f9e5b8f7aaafbd6fd4f9f874b2352.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 65KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE