Behavioral task
behavioral1
Sample
6fdc89667c37d44842af703998e56501a490cf3d782b1e1ed8e4061051151439.exe
Resource
win7-20240704-en
General
-
Target
6fdc89667c37d44842af703998e56501a490cf3d782b1e1ed8e4061051151439
-
Size
259KB
-
MD5
6a65a856771480dcddae0dbca721db37
-
SHA1
13057bd0e44ed00cf1d9778e0a4f86e65a070d42
-
SHA256
6fdc89667c37d44842af703998e56501a490cf3d782b1e1ed8e4061051151439
-
SHA512
8bfc93732ef0d5a7cd52c068369a0d959836834706bb6714addce22d91ca2e5664254498e04f7efd8bef07c2e1bab774f65942abbbb85e030d9577405a3a9947
-
SSDEEP
6144:lf4/sJYWd+ZO+oTcboiSLhCGnFo7ksYKFn3DqFn9Wh:lf4QlqMT0oignsd3rh
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fdc89667c37d44842af703998e56501a490cf3d782b1e1ed8e4061051151439
Files
-
6fdc89667c37d44842af703998e56501a490cf3d782b1e1ed8e4061051151439.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE