Behavioral task
behavioral1
Sample
dcb50d04a1a4c45550c1ee7b70c14cb071830718120940c7856d7c57d657c211.exe
Resource
win7-20240221-en
General
-
Target
dcb50d04a1a4c45550c1ee7b70c14cb071830718120940c7856d7c57d657c211
-
Size
450KB
-
MD5
7d6662e8eaac6cfe63db9295ce8163d0
-
SHA1
798ce2bbe29e9fddd261c2172645b6d9b59a87ba
-
SHA256
dcb50d04a1a4c45550c1ee7b70c14cb071830718120940c7856d7c57d657c211
-
SHA512
dd6068930cf8f7afd52fd297b969c6f669c0afba6ac86728b957f10874dc7182a5e633385436f771e137672f491209e8f79838797038b77ea953fde5cb14b7f4
-
SSDEEP
12288:5Iw12WfKAzArzvrdmCQmmrwABiRxQsA3rNPaPw+NMJ24IYhc:5IhtAzg7rdm77rMQsErN/+M0t
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcb50d04a1a4c45550c1ee7b70c14cb071830718120940c7856d7c57d657c211
Files
-
dcb50d04a1a4c45550c1ee7b70c14cb071830718120940c7856d7c57d657c211.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 77KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HFDSERR Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE