Static task
static1
Behavioral task
behavioral1
Sample
74fbb85079f7be6b83b7a44aa8c04967a2f738d933afe159dd972bd34b4a0cc5.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
74fbb85079f7be6b83b7a44aa8c04967a2f738d933afe159dd972bd34b4a0cc5.exe
Resource
win10v2004-en-20220112
General
-
Target
74fbb85079f7be6b83b7a44aa8c04967a2f738d933afe159dd972bd34b4a0cc5
-
Size
2.8MB
-
MD5
bbd6e5c672eb12cc3a924d3961ab9319
-
SHA1
bbbe7013c1632f12ed88eb9dac0817081fd76d69
-
SHA256
74fbb85079f7be6b83b7a44aa8c04967a2f738d933afe159dd972bd34b4a0cc5
-
SHA512
ee7fba43226a2e801834cf4e26cbaaacbca10e2b7f368d28a70f00e84783d246915e2dec0f3172592527621bf6ac6117c33ff7050cb57d80ab22532b44102b84
-
SSDEEP
49152:Kj8ETsLuo3m6tcqwtnLlnRuwJW64zNHMy9Fg6lb2mGXuUo99EOIesO4mqjL:LEW7ujZEzzNHg6h27+5im4m4
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
74fbb85079f7be6b83b7a44aa8c04967a2f738d933afe159dd972bd34b4a0cc5.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 91KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ