Static task
static1
Behavioral task
behavioral1
Sample
32e00ac923efd525db2bb8a2f820350c114e25a8960403a004a134aeab08c1bf.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
32e00ac923efd525db2bb8a2f820350c114e25a8960403a004a134aeab08c1bf.exe
Resource
win10v2004-en-20220112
General
-
Target
32e00ac923efd525db2bb8a2f820350c114e25a8960403a004a134aeab08c1bf
-
Size
2.8MB
-
MD5
7c21d6493161c1669455021f93e99969
-
SHA1
992556a5cc0d319f059dbcd660e08c6cf3395542
-
SHA256
32e00ac923efd525db2bb8a2f820350c114e25a8960403a004a134aeab08c1bf
-
SHA512
23a6cc77e1ea3f215cde65ddcdc7851aed1c8b2a15c01085696853061d2690c6fa302302117f867b7ee68c7f08d94e8bed20f510aaf46e11c6ef1f33a4c324b2
-
SSDEEP
49152:PIorBgrVKDW8gChiNoPRw9d8KEcf4sRMWE49Wk9+QDWYYOu4:PIU6gqMgKpw9DEcRHl9F
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
32e00ac923efd525db2bb8a2f820350c114e25a8960403a004a134aeab08c1bf.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 100KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 65KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
~©\1847 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
~©\1847 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
~©\1847 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 338KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ