Behavioral task
behavioral1
Sample
7ab6ef0244aa151816c375c2c4915f76.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ab6ef0244aa151816c375c2c4915f76.exe
Resource
win10v2004-20231215-en
General
-
Target
7ab6ef0244aa151816c375c2c4915f76
-
Size
522KB
-
MD5
7ab6ef0244aa151816c375c2c4915f76
-
SHA1
638ca6fdaf9d3214591c7fe59a30cdf33ab0a510
-
SHA256
7472dc0fa5e2bed6118eace6c34a484d78cdd12d1394e25cec1d3c5682868dfd
-
SHA512
9be6f7ddf874c6df8bc291d4a48e9fe02c0b73e8cc5be9403cee30e873fbc7a1b05cdcef650f946433e04f87882c30b9ad39cb0436c3a60d3d8a298bee89b891
-
SSDEEP
12288:ETKOJfSaqTBdzJBoMaq254At0X2blv6EW1965N2rU:UfSRtdFGMaq25XA2bx6vyN2Y
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ab6ef0244aa151816c375c2c4915f76
Files
-
7ab6ef0244aa151816c375c2c4915f76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 338KB - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 165KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE