Static task
static1
Behavioral task
behavioral1
Sample
31b6fc9d136b273e69bea34e7fa41fda29ba7281cb6b8e9c2315a80796c2e942.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
31b6fc9d136b273e69bea34e7fa41fda29ba7281cb6b8e9c2315a80796c2e942.exe
Resource
win10v2004-20220414-en
General
-
Target
31b6fc9d136b273e69bea34e7fa41fda29ba7281cb6b8e9c2315a80796c2e942
-
Size
1.2MB
-
MD5
0790a705093634b96d23b3c33e84a784
-
SHA1
1e8d10a38ddda32ae6ac947def5d62edbcf818e6
-
SHA256
31b6fc9d136b273e69bea34e7fa41fda29ba7281cb6b8e9c2315a80796c2e942
-
SHA512
7136353e620c4fecacba81f2c915342d5f0c6bc30d4254468c61699b0e8d7c08163bb46bf2170a10db1964e3c42a5360926928b14d51310d5fbe0b029355d08a
-
SSDEEP
24576:A6Yj0TFvxxC5C5EO4w8eHXypArVfUcBnNumh2KvR776bUvAsMHR:A6Yjgvz/6M/Hu4rBnSKvZI
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
31b6fc9d136b273e69bea34e7fa41fda29ba7281cb6b8e9c2315a80796c2e942.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE