Behavioral task
behavioral1
Sample
03a892824054e6eff53aba1b7af897cac810698391b62b4747a65052988ad640.exe
Resource
win7-20240903-en
General
-
Target
03a892824054e6eff53aba1b7af897cac810698391b62b4747a65052988ad640
-
Size
6.6MB
-
MD5
12174d3109e7b1a3fa94d1d777fb2d5b
-
SHA1
bdad256b1bd8ec137d8d9e69b8210be8f32bad4f
-
SHA256
03a892824054e6eff53aba1b7af897cac810698391b62b4747a65052988ad640
-
SHA512
e0e31ac6d15354bb6f4b9b231fa7ca34429f6f095ea27ace719e8e6385582b1e32d00ac5de59cbba79391dbe37a1ba693a159f77563e8dda8cd39107ea33f253
-
SSDEEP
196608:riYSbn6WllXlo4bGXF+3Df5gmEhMpySdbmgt:TSb6WXvQAZFJ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a892824054e6eff53aba1b7af897cac810698391b62b4747a65052988ad640
Files
-
03a892824054e6eff53aba1b7af897cac810698391b62b4747a65052988ad640.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 347KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6.2MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 30KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE