Static task
static1
Behavioral task
behavioral1
Sample
123456.exe
Resource
win7-en-20211208
General
-
Target
123456.exe
-
Size
2.6MB
-
MD5
5dc4a3b523a6f6bae722979d338b98f8
-
SHA1
44043d7e66ab8131ad83654e6c5d93ba04b7c25e
-
SHA256
6594d1a9beec1d63c08f6e7b82826647f6df74f53e1cfedaac99430f6d7581a7
-
SHA512
dbc269f94b9c96595f552bf0be16d2a82782db8ab5526973223ca6a19463d9fe65f25d654a3ba3b6d8ef3456150477e0930d01e2b18eae3dd30a9d6ab2a0233f
-
SSDEEP
49152:jNU3v91Hzf03BOWpWT7Uxyf+ebhv2gIuR7l8ZKV3:jEF94O0i7U8meFvXIur8Z23
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
123456.exe.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 61KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 718B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 267B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ