Static task
static1
Behavioral task
behavioral1
Sample
3f12c12fd597d5aceb58fb85572b2ead76a9441c0d03732afe62878906b6b71c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3f12c12fd597d5aceb58fb85572b2ead76a9441c0d03732afe62878906b6b71c.exe
Resource
win10v2004-20220414-en
General
-
Target
3f12c12fd597d5aceb58fb85572b2ead76a9441c0d03732afe62878906b6b71c
-
Size
1.2MB
-
MD5
46f51123aa48cad61a95461d899ed0d9
-
SHA1
69e14ea0012363ab46d700556889c622de74c14c
-
SHA256
3f12c12fd597d5aceb58fb85572b2ead76a9441c0d03732afe62878906b6b71c
-
SHA512
1bab7a0eb47f3d9d8c08f2b2a173e6093cfccda726e1d052b8048b0688a05064471e4fa76c539973b9a60a569faa4ea7795510a2a1604398e7897085953f6883
-
SSDEEP
24576:ZsI+Oeq5P9r6cuI5xORhZDF8Fs2+z3R18xT5mMtaWdQURVQDX:ZszM9AosBB8Fsnk5DQU/Q7
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
3f12c12fd597d5aceb58fb85572b2ead76a9441c0d03732afe62878906b6b71c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE