Behavioral task
behavioral1
Sample
b875664a25dca6167f259fadef5b681677bbf07ba43f013e2e14f80718b8ff7b.exe
Resource
win7-20231215-en
General
-
Target
b875664a25dca6167f259fadef5b681677bbf07ba43f013e2e14f80718b8ff7b
-
Size
10.0MB
-
MD5
ff7baa1354b8895da43398d33bfce2aa
-
SHA1
b3fd5b5dc1004434bb6b6afdb6c03318644d4e85
-
SHA256
b875664a25dca6167f259fadef5b681677bbf07ba43f013e2e14f80718b8ff7b
-
SHA512
1aca631e2666d05b0084fa54760ca62da715c4e1c4f8738ee1d49d8fe88dd32600aeff8a347688a6a9ed7a0fe6a99e51f56e5a69d9be925c45d2343a93d8815f
-
SSDEEP
196608:zYnrKWUGNEoiN/A4sj+EiIXP5DKViheOUOAWJyK/SM3//5:Un2pGNvj+/G5yufJyGSMJ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b875664a25dca6167f259fadef5b681677bbf07ba43f013e2e14f80718b8ff7b
Files
-
b875664a25dca6167f259fadef5b681677bbf07ba43f013e2e14f80718b8ff7b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 272KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 615KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE