Behavioral task
behavioral1
Sample
db006f88b4f964d649b70a81003c5ea0N.exe
Resource
win7-20240903-en
General
-
Target
db006f88b4f964d649b70a81003c5ea0N.exe
-
Size
231KB
-
MD5
db006f88b4f964d649b70a81003c5ea0
-
SHA1
9527658f10e62b1a77dde864a412b01dbee5758c
-
SHA256
99df705ec69e7517a8f6322fae1ea9b46554dd1a1bfc65b6e96942deb04c2ed9
-
SHA512
8f54052d4d840529a56880b70f221e4a7172557fd03ba93322889466d29be9c1bb46ae2375ac4141c51d63312427ec7260fef5e8ebd34ea4b9796863cbe7692b
-
SSDEEP
6144:22IXn2Kid45GqVl4JUiNf1G2fofZ6N96UYc+D:hJo5GYy+Kf1GMWZ62UYc+
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db006f88b4f964d649b70a81003c5ea0N.exe
Files
-
db006f88b4f964d649b70a81003c5ea0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 203KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vbl Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE