Behavioral task
behavioral1
Sample
7fc51a3bfc75e25e53237eb9ed567b8c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7fc51a3bfc75e25e53237eb9ed567b8c.exe
Resource
win10v2004-20231215-en
General
-
Target
7fc51a3bfc75e25e53237eb9ed567b8c
-
Size
1.4MB
-
MD5
7fc51a3bfc75e25e53237eb9ed567b8c
-
SHA1
7aaa081a34b94d844a42887aaa35d00fc465ac92
-
SHA256
2f1f9f4ec0248c5dc48b658affce2ad5ec8023fe5c2b08a2be9aa49df4fcfe96
-
SHA512
4309b35c5a19d959a09dc49997d4d032509dfbc2d3d45cc4ccd4256359fdbf5218dc0f36c5a8525666faac222abd0873846e5384fe41dbcb19c9d5a0bb2e8eb0
-
SSDEEP
24576:un9LEE9MZr42HTxFysTVIGfMjgvOtAlBxw8R7dH1bW03Ns/MMyBtSid9N/x/W4b:iVOZrtTKO9EntAiC7t17sEKKN/x/W4b
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fc51a3bfc75e25e53237eb9ed567b8c
Files
-
7fc51a3bfc75e25e53237eb9ed567b8c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 329KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE