Behavioral task
behavioral1
Sample
0832b5962eef2fd3f715c7aa471e2908409cbce6b501346b491fb12f7036ea23.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0832b5962eef2fd3f715c7aa471e2908409cbce6b501346b491fb12f7036ea23.exe
Resource
win10v2004-20240412-en
General
-
Target
0832b5962eef2fd3f715c7aa471e2908409cbce6b501346b491fb12f7036ea23
-
Size
797KB
-
MD5
a996178dfadf268080a0cdacddda0e01
-
SHA1
dc8c1a17315d180a040ed16751643967016520b9
-
SHA256
0832b5962eef2fd3f715c7aa471e2908409cbce6b501346b491fb12f7036ea23
-
SHA512
ef990861d7c5b1293600ad892f663475cc5b64041d5881bd75b9047e4e59a24b4653725a56c12a59e491070d6cc5da9c6f092763c5b75ab8a1daf1d4605f4de7
-
SSDEEP
12288:97Vqsuvac9BNU0EsEpRmYkViRpPrngoQDxi0iOjaI5OlCmk1GmmzpWqrVXah:+sGacPBYkVCPUnxiYjaI1apWqBG
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0832b5962eef2fd3f715c7aa471e2908409cbce6b501346b491fb12f7036ea23
Files
-
0832b5962eef2fd3f715c7aa471e2908409cbce6b501346b491fb12f7036ea23.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 332KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 91KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 348KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE