Static task
static1
Behavioral task
behavioral1
Sample
893b4909ff48fa04ea302af434accc2c68c0c6bc209d9645506c98aa2c9f29aa.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
893b4909ff48fa04ea302af434accc2c68c0c6bc209d9645506c98aa2c9f29aa.exe
Resource
win10v2004-en-20220112
General
-
Target
893b4909ff48fa04ea302af434accc2c68c0c6bc209d9645506c98aa2c9f29aa
-
Size
4.1MB
-
MD5
91bd1fb299512dd0da78aab2e17ab0bd
-
SHA1
f6e48db57c87cc108aa9cdd5f9f804aafa60fb54
-
SHA256
893b4909ff48fa04ea302af434accc2c68c0c6bc209d9645506c98aa2c9f29aa
-
SHA512
c58014286e3c7dc99aeb2159c44c456ffe973d63d0e7fd86268a069e33d256bd9bc8a1fbd32f683bc1d3c01b9a17e1b4a8562b09e6bccfe9da8f4f40508dc983
-
SSDEEP
98304:5EkLc6xC0OujVsDqGqqZYxsz8b4CSI3E24A/m2Vw:OdYWgSxuw
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
893b4909ff48fa04ea302af434accc2c68c0c6bc209d9645506c98aa2c9f29aa.exe windows x86
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE