Behavioral task
behavioral1
Sample
98b2e56a4f835b7b964675e5995d779c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
98b2e56a4f835b7b964675e5995d779c.exe
Resource
win10v2004-20231222-en
General
-
Target
98b2e56a4f835b7b964675e5995d779c
-
Size
27KB
-
MD5
98b2e56a4f835b7b964675e5995d779c
-
SHA1
e41d0b757e080984557109f0bd6fbed7ac1ea2d1
-
SHA256
dd63b4929998c3709c4d1d8cc6ae7de68c9f5908c696fc5f733af272f83be6be
-
SHA512
6c283a73a139c6a7cd146e9d33d4ad52d5eb678f797174358956d32ad64e3c4679f4de568ade29e6db82ee3136cf8f21c642a76f91e6286bb9bffd74402efce8
-
SSDEEP
768:arGlU3/wrclnhroVN1z3v9Qp+zaHeAhx+TDjkxlUz5wz:arGe3/UIhkEpkaHeAyjkx2dwz
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98b2e56a4f835b7b964675e5995d779c
Files
-
98b2e56a4f835b7b964675e5995d779c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: 512B - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASPack Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE