Static task
static1
Behavioral task
behavioral1
Sample
a753520f6e10b07283488893315f3c5e03fbed7e27b303e95934d62f1acaa409.exe
Resource
win7-20220414-en
General
-
Target
a753520f6e10b07283488893315f3c5e03fbed7e27b303e95934d62f1acaa409
-
Size
3.9MB
-
MD5
84c119baf2964e44d504f6172d89f593
-
SHA1
d74042f52d0a2d5cd4543b6c4a8e31b8a4c5bee4
-
SHA256
a753520f6e10b07283488893315f3c5e03fbed7e27b303e95934d62f1acaa409
-
SHA512
3dcac82230c278b8a1c4e063d79bd308c8e8ee65e71d8e0b371ac8520049fd2a863bc0b9b910989a5e310534aea6fe1274c2774e755ca701b977f8bc983bef6b
-
SSDEEP
98304:9iWpxnfK4c0xrpmS7W2cxsp797vO0L3flHVy:llKvTE1R7vOqfl8
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
a753520f6e10b07283488893315f3c5e03fbed7e27b303e95934d62f1acaa409.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 673KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 604B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ