Static task
static1
Behavioral task
behavioral1
Sample
efc010b18cf26c400372502d0664fdf9f067decbdefe284fd62bde3491c574e0.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
efc010b18cf26c400372502d0664fdf9f067decbdefe284fd62bde3491c574e0.exe
Resource
win10v2004-20220414-en
General
-
Target
efc010b18cf26c400372502d0664fdf9f067decbdefe284fd62bde3491c574e0
-
Size
1.3MB
-
MD5
3a607f12626540f50e70211dbfbfa247
-
SHA1
d62e187f2a8c6ecbc54c3897d6e855492872893d
-
SHA256
efc010b18cf26c400372502d0664fdf9f067decbdefe284fd62bde3491c574e0
-
SHA512
df294e73f7c695ce0566803d65ad8389f79cba7f2cf56adc348e5bd5922c162efd9b4f51924644a3ce7169cb7a9d4fbb35edae20056b612d4a707444c64c328a
-
SSDEEP
24576:MHjh6ks8sFDRN5Tuvstfz/0ldSSQ46+Og+58r6btc7x//zryslvJTfCM0:8jTm5QxWSQXKr6c/7rT1f
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
efc010b18cf26c400372502d0664fdf9f067decbdefe284fd62bde3491c574e0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE