Static task
static1
Behavioral task
behavioral1
Sample
080ee6c068e95db7a776793e167fb4bb9ad0efcb424a400ed3efe697400fc73a.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
080ee6c068e95db7a776793e167fb4bb9ad0efcb424a400ed3efe697400fc73a.exe
Resource
win10v2004-en-20220113
General
-
Target
080ee6c068e95db7a776793e167fb4bb9ad0efcb424a400ed3efe697400fc73a.7z
-
Size
3.1MB
-
MD5
13394cc693fe018d947cfb169b065fe5
-
SHA1
7a641c617d8056f9bbba07cdc9a7ca66e647d2c5
-
SHA256
d850202961a4ad215a5779c3794a11eeb82da11ab6ebdb52400e6b60fb1bdc2f
-
SHA512
5a1872864ba022dfac2d2ccb6c598d8434f53a5b3dfc72939a8728393d30e12d7b46607d545f35cdaf6cd43172a38e94354bc45b0e31b01dc07e3a2e599f478f
-
SSDEEP
98304:spUfHd1FSO0rLrTXxu7vnIJquTKfHuCkYRtJ54:scHFmLfXxmvgkHuCRRtJ2
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/080ee6c068e95db7a776793e167fb4bb9ad0efcb424a400ed3efe697400fc73a themida
Files
-
080ee6c068e95db7a776793e167fb4bb9ad0efcb424a400ed3efe697400fc73a.7z.7z
Password: infected
-
080ee6c068e95db7a776793e167fb4bb9ad0efcb424a400ed3efe697400fc73a.exe windows x64
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 808B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 455B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 368B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 230B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 175B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ