Static task
static1
Behavioral task
behavioral1
Sample
aspweb88.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aspweb88.exe
Resource
win10v2004-20240508-en
General
-
Target
aspweb88.exe
-
Size
711KB
-
MD5
c6c8cb870fe02f6e5bbb297ba36275cc
-
SHA1
db370068fc0b89b57d3f2bfc250ba8ca2b040e31
-
SHA256
bc5cc5828933c52cfae2c801627e7d212104193e65c0cb1724dd7a44f11703f4
-
SHA512
f5539ccf41813414c26b09efb9bf8329d92c18374b4a002387c6f9c1118196e02441ed2fde5b8a04f7e8a0d45777f9fc3a0792aa2ba650916e189b9a0ad2570b
-
SSDEEP
12288:2JFZqYMOaQ0q9nV/zsnK23KHVI6nodVdyMLiqyVcxwtVxgpMiuzOT5r7CjhSZhI:2FZqhOBnVyK23C6OoYMLiVcKtVx4Miu7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aspweb88.exe
Files
-
aspweb88.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE