Behavioral task
behavioral1
Sample
034d8121dbe09c3223965de17b5075b5241b494ef367ed2831f3959ca9367f3a.exe
Resource
win7-20240729-en
General
-
Target
034d8121dbe09c3223965de17b5075b5241b494ef367ed2831f3959ca9367f3a
-
Size
4.6MB
-
MD5
2e028b6d6f2f8c7b7b4718b5590c3f24
-
SHA1
9e527c31c98e629e63f1e558b4c52bfab636a2b4
-
SHA256
034d8121dbe09c3223965de17b5075b5241b494ef367ed2831f3959ca9367f3a
-
SHA512
ae853530d10e6c799a44e946c897b76a506f83d82cee0bfaf9ef52cdbe463c5a24d93fa8c027e19bdc687ee15a2d3351840735ee9d348aef677892e3a169a63e
-
SSDEEP
98304:AGwJx1D22RwEgMr+k4q4KeWbRPkev9NW+NnCYrDlFNWxmW:AGwJx1y8R7FznCYNPL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034d8121dbe09c3223965de17b5075b5241b494ef367ed2831f3959ca9367f3a
Files
-
034d8121dbe09c3223965de17b5075b5241b494ef367ed2831f3959ca9367f3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 579KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htm5 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE