Static task
static1
Behavioral task
behavioral1
Sample
2eff5cf40e42030dc9c838f6cea5382439ac6137a9313c345a99959af631aeae.exe
Resource
win7-20220414-en
General
-
Target
2eff5cf40e42030dc9c838f6cea5382439ac6137a9313c345a99959af631aeae
-
Size
918KB
-
MD5
5a3270b10afcd92345fef736a534d8be
-
SHA1
74e0bb0819644c35b9044c39d9ba27a890759196
-
SHA256
2eff5cf40e42030dc9c838f6cea5382439ac6137a9313c345a99959af631aeae
-
SHA512
6806c7b3f1d23be7e2ac2404c8098dc40ca4fe727b7743364458fc8efb6a6c07872aa81ead472eab81ff668ff53c54dc204c94d3462d787ed577b2ef0820a346
-
SSDEEP
24576:T5pBWxKCo2WZwGpanWCoSL67L+QFokvNtz79OTJlVj:1pBFX2WTpkWz8oO9
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
2eff5cf40e42030dc9c838f6cea5382439ac6137a9313c345a99959af631aeae.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 287KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 618KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE