Behavioral task
behavioral1
Sample
dab0407cf60dbd869ad1faf73cd0887dceac5b3ddc9ade0ea7532fa259b5533b.exe
Resource
win7-20231129-en
General
-
Target
dab0407cf60dbd869ad1faf73cd0887dceac5b3ddc9ade0ea7532fa259b5533b
-
Size
451KB
-
MD5
14efebcbe154ad5bbbdd466a94dd6d0c
-
SHA1
ec266c0e0b72a5dfbc1514733cdc664c18198568
-
SHA256
dab0407cf60dbd869ad1faf73cd0887dceac5b3ddc9ade0ea7532fa259b5533b
-
SHA512
49658444d8a6a53b837f489aa35e11611852182647df535d4a089a3fc938765ccec8fd8b9d826b3abc2bc0e453c2ea8eaba60ade712ea1836a48784bb4f21ac2
-
SSDEEP
12288:5Iw12WfKAzArzvrdmCiiRxQsA3rNPaPw+NMJ24IYhc:5IhtAzg7rdmOQsErN/+M0d
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dab0407cf60dbd869ad1faf73cd0887dceac5b3ddc9ade0ea7532fa259b5533b
Files
-
dab0407cf60dbd869ad1faf73cd0887dceac5b3ddc9ade0ea7532fa259b5533b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 77KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HFDSERR Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE