Behavioral task
behavioral1
Sample
2502d3ef2d9e981168c97553d2376670N.exe
Resource
win7-20240903-en
General
-
Target
2502d3ef2d9e981168c97553d2376670N
-
Size
4.6MB
-
MD5
2502d3ef2d9e981168c97553d2376670
-
SHA1
2d74fcab924e053b28d546b8d541e618d61891c7
-
SHA256
1cba9950cf661091f7ecf141c79d4aa8e81dc66707f42edfc9982319c6777e52
-
SHA512
bd3922f7d85ee0402ed25f256bd98c33673ecd4cb0263719c7d6ba1e6f5f4b940f82768f9cb1081ac7cafa298d3b66511c89010207ca1289ef786220b90205cb
-
SSDEEP
98304:OwxT6kLLa65+lm17w+A7Ep/k4q4KeWbRPkev9NW+NnCYrDlFNWxmW:OwxTpLLa6sdR7FznCYNPL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2502d3ef2d9e981168c97553d2376670N
Files
-
2502d3ef2d9e981168c97553d2376670N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 579KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htm5 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE