Static task
static1
Behavioral task
behavioral1
Sample
52ce26bf711a0d2ea410e325fdb0acc1b81d3305c421b0fa2a882780a0c7c191.exe
Resource
win7-en-20211208
General
-
Target
52ce26bf711a0d2ea410e325fdb0acc1b81d3305c421b0fa2a882780a0c7c191
-
Size
2.6MB
-
MD5
db9f562738a4cd6adbfde0669264da02
-
SHA1
350c4acbd7a7b26e3ef5d4aaaecf660c7a8a07d1
-
SHA256
52ce26bf711a0d2ea410e325fdb0acc1b81d3305c421b0fa2a882780a0c7c191
-
SHA512
35b7d1f9f40e49563092c523a0a27554d22e8587e3378aea46711d20c155ac2746d24c19c15c7db3a915480e04ef738d6d19cac6a5ce1c6b881a506b2ee968e7
-
SSDEEP
49152:gEXCVnLer5jqZuXkZmm+0v+Fxm5La/lYjbUeqT/aVjguz:gnLMp+uwvmaa/lYbMTCd
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
52ce26bf711a0d2ea410e325fdb0acc1b81d3305c421b0fa2a882780a0c7c191.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 55KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 13KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ