Behavioral task
behavioral1
Sample
7b02c60206a50b175848b57412272ab2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b02c60206a50b175848b57412272ab2.exe
Resource
win10v2004-20231215-en
General
-
Target
7b02c60206a50b175848b57412272ab2
-
Size
70KB
-
MD5
7b02c60206a50b175848b57412272ab2
-
SHA1
2c31531cf9390d558d9123e0398c76c85d6c5aa1
-
SHA256
437296dea5e324c88155c66cb78a4d6ce46d85c0d4f94f3a40a42a6a5d911620
-
SHA512
885afdff1a9d247c0878b3d081d7a56cdc7b685014d42a7bac9576434a3b42285e942efbb2b9431b5213c8819d91573628484d2563cbd845224cfb2781d67a62
-
SSDEEP
1536:VV8hq/rGNE4z3YnwcYWRmIXVPoWSlhyqfDPVKibFHGJ0wJEo:VV8hYrG5z3YnwcjbSKo0um71
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b02c60206a50b175848b57412272ab2
Files
-
7b02c60206a50b175848b57412272ab2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE