Behavioral task
behavioral1
Sample
98ef85c989fb0c536d6fa89832503e77535f9425ef49d34f88f813e6e5b53ac7.exe
Resource
win7-20240704-en
General
-
Target
98ef85c989fb0c536d6fa89832503e77535f9425ef49d34f88f813e6e5b53ac7
-
Size
4.6MB
-
MD5
d7674763a93578f66d592a43bdcc5d88
-
SHA1
0a7d6be0f04d41522d96b6073ec8e6d80ee0ac65
-
SHA256
98ef85c989fb0c536d6fa89832503e77535f9425ef49d34f88f813e6e5b53ac7
-
SHA512
bb8d648f2eeccbc5eb5b2ffe2fdd296978392b5e0d677360abe314b5419075b484b1f7e6426e5318d76de611962510b90b89b3e06f5786d14c3c18ab3f8f45be
-
SSDEEP
98304:NhsYTCse7lps53OC16OmF/HYQ4Poc10k4q4KeWbRPkev9NW+NnCYrDlFNWxmW:rU7zEHmF/HwPJR7FznCYNPL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98ef85c989fb0c536d6fa89832503e77535f9425ef49d34f88f813e6e5b53ac7
Files
-
98ef85c989fb0c536d6fa89832503e77535f9425ef49d34f88f813e6e5b53ac7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 577KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htm5 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE