Behavioral task
behavioral1
Sample
58d3980a0a7792f4ee5b6a3c4f044288.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
58d3980a0a7792f4ee5b6a3c4f044288.exe
Resource
win10v2004-20231215-en
General
-
Target
58d3980a0a7792f4ee5b6a3c4f044288
-
Size
141KB
-
MD5
58d3980a0a7792f4ee5b6a3c4f044288
-
SHA1
4a4d406543b61065f3771e445c2bb15785409bcd
-
SHA256
eff012d8f680726131123f1d294ce74813bbde8e33a4f8c4dd566fb014fd329f
-
SHA512
46a5fb5f613faa761f54ed1618d6480eeb1502fba3fa2e72484d84678d2560e1282e0f542188f26ae4284a51c3db39eb2c00273323d4339df38f237ae7b22abc
-
SSDEEP
3072:pbMGw/eTq5G3iIbJsc51ezm6PIrnc9KEsVbcygc20hmdDp8X2AN/cHOfa:JMX/TcSIJ1Am6A49KEsVAyjmT8XT6Hu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58d3980a0a7792f4ee5b6a3c4f044288
Files
-
58d3980a0a7792f4ee5b6a3c4f044288.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE