Behavioral task
behavioral1
Sample
30af4a073eef1bf995aebd48d97abb7024b69d81a22ac2e9efed4e1f4b8b2725.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30af4a073eef1bf995aebd48d97abb7024b69d81a22ac2e9efed4e1f4b8b2725.exe
Resource
win10v2004-20220812-en
General
-
Target
30af4a073eef1bf995aebd48d97abb7024b69d81a22ac2e9efed4e1f4b8b2725
-
Size
1.4MB
-
MD5
2f2318a39dcbedb31ca10457062e1226
-
SHA1
873f5d8e64d3eb62739f0d3f1e01b606d50e7cf2
-
SHA256
30af4a073eef1bf995aebd48d97abb7024b69d81a22ac2e9efed4e1f4b8b2725
-
SHA512
8727b2dcd5f9caa239cfe1e8550d74c616c5a4195cf254621decf7944fbe5123efb3b4ac5e9ba133863ba63fe886a35da854d40caf12b9be86d4cab95533a541
-
SSDEEP
24576:yqdHiKwq2zqln+oqxsy0GvRUdcgIbQfi+QWFEORtudP8vNhwDFGMVV:VdHBwjel+RsMuGgYdWjHxFU5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
30af4a073eef1bf995aebd48d97abb7024b69d81a22ac2e9efed4e1f4b8b2725.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.3MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 50KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE