Behavioral task
behavioral1
Sample
95abed65b469d5afbf9daa3337ccf90ed8df33e5749f21d4cc8831db6a2341ea.exe
Resource
win7-20240704-en
General
-
Target
95abed65b469d5afbf9daa3337ccf90ed8df33e5749f21d4cc8831db6a2341ea
-
Size
2.9MB
-
MD5
9bb9d64fa1b1658dc63687235fc1246d
-
SHA1
c6b348c9dd45400f0e0d2110afd83892e6e28a31
-
SHA256
95abed65b469d5afbf9daa3337ccf90ed8df33e5749f21d4cc8831db6a2341ea
-
SHA512
d555deb9060a5b09c9b54cb702fb7892d260cc80c1278932674ee25c02daa85a6525bad6fb5be56b8d07a79af80a1f63f7fd4c8b8a88c9ab07b1fb669a3a417c
-
SSDEEP
49152:4qA6oYfIEOJGPr7/OXw0+Wii3ATAjW+CW0DBtYibYSgNpPRqseOmfvi797NywVTq:4xzkOJGPvzWbA0jWDWcBLxgNppqstmf
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95abed65b469d5afbf9daa3337ccf90ed8df33e5749f21d4cc8831db6a2341ea
Files
-
95abed65b469d5afbf9daa3337ccf90ed8df33e5749f21d4cc8831db6a2341ea.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 680KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.8MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 379KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE