Behavioral task
behavioral1
Sample
f2f30d65b2dc6f9951e13d44b6f659dff1a0da10549131d5d6a7316ca87622f0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2f30d65b2dc6f9951e13d44b6f659dff1a0da10549131d5d6a7316ca87622f0.exe
Resource
win10v2004-20220812-en
General
-
Target
f2f30d65b2dc6f9951e13d44b6f659dff1a0da10549131d5d6a7316ca87622f0
-
Size
45KB
-
MD5
30136420f67e5f3d4f6d992c0a2b45c0
-
SHA1
61500185141906c9dc29696c3843d8156cf7ace8
-
SHA256
f2f30d65b2dc6f9951e13d44b6f659dff1a0da10549131d5d6a7316ca87622f0
-
SHA512
70e7798ee7c82715a14c77af8f840a49b167ce290fd36026ee609264557105b0a377104f098ad93308c27dcc8e8d3f1861a5273b377bc4a3321bcc440026a799
-
SSDEEP
768:6x2ZiddEC7lRaqtcSI3QpG3bvb2m9RkUT4rdlnjUsWc5ax3deVFv0fGJPLVbPY6m:6ATWlsCNI3bvyyb2FjUmMe+GJP5jY6/+
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
f2f30d65b2dc6f9951e13d44b6f659dff1a0da10549131d5d6a7316ca87622f0.exe windows x86
Code Sign
28:85:da:3a:c3:69:97:c7:66:51:8f:51:a9:03:5b:6c:59:37:f7:e4Signer
Actual PE Digest28:85:da:3a:c3:69:97:c7:66:51:8f:51:a9:03:5b:6c:59:37:f7:e4Digest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE