Behavioral task
behavioral1
Sample
f81d142c883e94d2e5d75fae78a52f3af07f9fd9bc424ed4d797471aea810b92.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f81d142c883e94d2e5d75fae78a52f3af07f9fd9bc424ed4d797471aea810b92.exe
Resource
win10v2004-20240802-en
General
-
Target
f81d142c883e94d2e5d75fae78a52f3af07f9fd9bc424ed4d797471aea810b92
-
Size
568KB
-
MD5
230d4a5f58c7e9758e8513bb4d360119
-
SHA1
05a6556907678a640cb940c6ee510ad5f799fad9
-
SHA256
f81d142c883e94d2e5d75fae78a52f3af07f9fd9bc424ed4d797471aea810b92
-
SHA512
c184e4273e1203e25d830143094491e72bbc2bab4432a4091706a720f56e2d2f82304a037d498fdc1f8d0fc1d355cff51ddd565255cb5a4825b727678e82df10
-
SSDEEP
12288:OBNIFUjD5aETrj4RBNIFUjD5aETrj4vPejVWYUFos:OB604RB604vmjkYaZ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f81d142c883e94d2e5d75fae78a52f3af07f9fd9bc424ed4d797471aea810b92
Files
-
f81d142c883e94d2e5d75fae78a52f3af07f9fd9bc424ed4d797471aea810b92.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE