Behavioral task
behavioral1
Sample
a20c229cdb9371ed6ce3c25d82b58132.exe
Resource
win7-20240221-en
General
-
Target
a20c229cdb9371ed6ce3c25d82b58132
-
Size
69KB
-
MD5
a20c229cdb9371ed6ce3c25d82b58132
-
SHA1
d63513c4b86139c7a845e41876de7e99b2b8b7c0
-
SHA256
fbd2b5bc86744358937c2401a8782bed2c66733a3238bb2977cd26a84490cd88
-
SHA512
d97322bc373f55bcc487aae9d4088c168f5fb147e00dbde2fd402afe495099d6e741f8fc285dc3b31c2cc76f7ed2ab90f16033ee3c52503d8fe0006da0614219
-
SSDEEP
768:ATciLNYimExXle7nH93ZIUF7njxoc/u1JFUuSnKd3cYcnjEjn0fPDRzJMZcUlKzT:RiyiXonXFHicGvAnKuYcz79JMZcUKv1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a20c229cdb9371ed6ce3c25d82b58132
Files
-
a20c229cdb9371ed6ce3c25d82b58132.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE