Behavioral task
behavioral1
Sample
30129751af0a6578dcd22b2162f52bb0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30129751af0a6578dcd22b2162f52bb0N.exe
Resource
win10v2004-20240704-en
General
-
Target
30129751af0a6578dcd22b2162f52bb0N.exe
-
Size
312KB
-
MD5
30129751af0a6578dcd22b2162f52bb0
-
SHA1
8560113f32332d69325572beacea1d6041adaefe
-
SHA256
e2cc7d14f8a30e02f9ef133b2f6e7b7c2835cfd432bd6756e31ba8e21ee5bf2f
-
SHA512
3f5a5870158dc1834c5d540ddf7aff426cec6bc7636299710ae9820b8a037bf308f5c486ea8fe18e114ae9cd4fcc7b49b2fee56c27f0c9d190a22cf64bbd580c
-
SSDEEP
6144:kqTiEscNfOrEVUcpkC9PMgMIv4svOvsBrPlRwp3y+Bu:hNrfO4/pk6PsIROmrP7w8+Bu
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30129751af0a6578dcd22b2162f52bb0N.exe
Files
-
30129751af0a6578dcd22b2162f52bb0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 234KB - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE