Behavioral task
behavioral1
Sample
cabf4f9e527b986dbb798b5c0192b542.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cabf4f9e527b986dbb798b5c0192b542.exe
Resource
win10v2004-20240226-en
General
-
Target
cabf4f9e527b986dbb798b5c0192b542
-
Size
454KB
-
MD5
cabf4f9e527b986dbb798b5c0192b542
-
SHA1
0fa8a5ffed7bc4d77c37dcd37fa4f9bbc9b38f38
-
SHA256
dcefa9f882141fe5e45f4c6f9dc18a6a19f489e5711436bbbd77c0a5686a8f29
-
SHA512
b2d449ad9edaca64082e7a6598001ccc06fb01a24f958ed797b05e4de95620c5f50305ae0088b414a6521c3b055b8390707154243eb285f9924f2f2b7d3820bf
-
SSDEEP
12288:m+W4K4tciJnUuOQ2Ec3uKigR9rhyOZizMKyhR5Ro3:C4K4jUFDEc3yohyIiHuPG3
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cabf4f9e527b986dbb798b5c0192b542
Files
-
cabf4f9e527b986dbb798b5c0192b542.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 321KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE