Behavioral task
behavioral1
Sample
99197491d9c218254d592ca02ccd97f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99197491d9c218254d592ca02ccd97f4.exe
Resource
win10v2004-20231215-en
General
-
Target
99197491d9c218254d592ca02ccd97f4
-
Size
113KB
-
MD5
99197491d9c218254d592ca02ccd97f4
-
SHA1
b83e9429f4e77e1ec331e3baf10b6c9e44dddd0e
-
SHA256
e7f90f5fae982cd564dc47a3602189d8011ae883cffa3254442f24f5e00f5317
-
SHA512
14a92dc2787a927b49d7f7abf17ae270bda25be8fc9c75a077bcb6a403b4297067ce8b30cea0ee2fa348ed782ac0f454c67a0e9f7a0ae3f75361328dae602d66
-
SSDEEP
1536:+rFa16qMxFuCsMOwBfEohRk2Z5H75hdAdHYUIJBqi6g/RqhWN4vXVVvprov:QYMxFuCrymRkWFKYvJBqk7NUXzpro
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99197491d9c218254d592ca02ccd97f4
Files
-
99197491d9c218254d592ca02ccd97f4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 87KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE