Static task
static1
Behavioral task
behavioral1
Sample
Lecture 6.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Lecture 6.exe
Resource
win10v2004-20220414-en
General
-
Target
Lecture 6.exe
-
Size
1.4MB
-
MD5
9c950da83e0b49433d50229b8ecb3c6d
-
SHA1
6e40a827c392f67f1af5a705ece37b8b294861a2
-
SHA256
4240b23dd7d89c30d0f480ce4207ea1a1a3ae1a66a1c4ad5c7028d1b31bdeeaa
-
SHA512
4bd0b26e5f969c28be71af3e53c1c6432e8c51ec6406366a21db5cfeb1754b9b7812eef6f143cc43654cae5a90db38013ee255bf342ca9c8723892e88a195344
-
SSDEEP
24576:aDw99VKbUEptItH5F+Kf3gUDNrkD0wN+7Twa1zhWf2R22MdtTPuj+xsKy4S6TKFa:aDw3wAStIrd39iD0ZTwa1zUvVPT24E9K
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
Lecture 6.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 86KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 16KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 181B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.exports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ