Behavioral task
behavioral1
Sample
30b34a3a6968e1f69105969f972b445e456e0d9478af3651eea2858598214618.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30b34a3a6968e1f69105969f972b445e456e0d9478af3651eea2858598214618.exe
Resource
win10v2004-20220812-en
General
-
Target
30b34a3a6968e1f69105969f972b445e456e0d9478af3651eea2858598214618
-
Size
371KB
-
MD5
0e865f278a85d5356fc3799c50817466
-
SHA1
8eeb5720876e0b493e65f951fa87cd1b0b83a237
-
SHA256
30b34a3a6968e1f69105969f972b445e456e0d9478af3651eea2858598214618
-
SHA512
d674d40e042d6d4f49bf0c3312188ec33f12f3bac693e24a552a3f5ddb293f34c0a5388700c1f31c788227d25d57ef87a6e232fbeb16e5b2056e06b8b6a07b85
-
SSDEEP
3072:r5GzISZsEGL86PcvgKOEtg3+DQsm7QF6PEpezoWkoU:7SZsBLfPcvgKVpDQsm7QF6PEpezoWFU
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
30b34a3a6968e1f69105969f972b445e456e0d9478af3651eea2858598214618.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE