Behavioral task
behavioral1
Sample
ed8e2ccaf02ff4b02fd62f74e179806d9ffeffb3511ade72389fa4f5dbe9d628.exe
Resource
win7-20240611-en
General
-
Target
ed8e2ccaf02ff4b02fd62f74e179806d9ffeffb3511ade72389fa4f5dbe9d628
-
Size
8.4MB
-
MD5
b77cff0b60fd299c04d7386a7d475986
-
SHA1
c00cd1839cffd2d025a3776e2bfb15bb843bb71f
-
SHA256
ed8e2ccaf02ff4b02fd62f74e179806d9ffeffb3511ade72389fa4f5dbe9d628
-
SHA512
6a94059fba4e81b89ab3239cd7c23b9c8c8ecddea89f88122babbd8a1c55f334e571e7fcca5ee7b006dae1ed745ea7e71865bf10dd44f30395a825b1328f78b0
-
SSDEEP
196608:2Y4+fOvEN+13Eh96d0kYBGKzLGFbNz1ygGWpiVPTAzW2ncLO:2P+ae0Uh9RffGHz1JGW1CYcLO
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed8e2ccaf02ff4b02fd62f74e179806d9ffeffb3511ade72389fa4f5dbe9d628
Files
-
ed8e2ccaf02ff4b02fd62f74e179806d9ffeffb3511ade72389fa4f5dbe9d628.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 55KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 15.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE