Behavioral task
behavioral1
Sample
215302860a4a57f1516313cfd050b41a8ec5d899e51edc4b7af0b47864e1b54b.exe
Resource
win7-20231215-en
General
-
Target
215302860a4a57f1516313cfd050b41a8ec5d899e51edc4b7af0b47864e1b54b
-
Size
9.7MB
-
MD5
60a686ce9fa6ca279758f9b308c65b4a
-
SHA1
f86a5cd5d2f4dce838328f3b2ac733c66ab95918
-
SHA256
215302860a4a57f1516313cfd050b41a8ec5d899e51edc4b7af0b47864e1b54b
-
SHA512
60a1b377ee511997cbfa54392ee528c46054ed6768c123e97b8a275c874ea44afd822fc3bbc50fe3839e8554664f3ad9fbadb15c69886b98252ab8e149c2789f
-
SSDEEP
196608:zYnWKWUGNEoiN/A4sV6lnsfTNEqdXahO1J91M+kUiXPn1GGijoX:UnzpGNvV6GbqqVahO1J9i+kPXP1/pX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 215302860a4a57f1516313cfd050b41a8ec5d899e51edc4b7af0b47864e1b54b
Files
-
215302860a4a57f1516313cfd050b41a8ec5d899e51edc4b7af0b47864e1b54b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 272KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 615KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE