Static task
static1
Behavioral task
behavioral1
Sample
a6741e55a5e91be6e8d2c8b70857829b11556c5865990055fb49d8978e643fc5.exe
Resource
win7-20220414-en
General
-
Target
a6741e55a5e91be6e8d2c8b70857829b11556c5865990055fb49d8978e643fc5
-
Size
2.2MB
-
MD5
6a2a6a7e27fe3151c2af49a4e4de9915
-
SHA1
769cedf745dc2eb30f520905e3d476422e3a43ce
-
SHA256
a6741e55a5e91be6e8d2c8b70857829b11556c5865990055fb49d8978e643fc5
-
SHA512
e40acae93c353f8a1fa1a7cd893897c8bc9d7cf7d06d304156d4b9e2829790d1a89c756d7cbaee50066886c1e0480cbd8a28f5d8a836d467d2bc4bacb6bb381e
-
SSDEEP
49152:TIDHzPrYxwGVIisJw6pk0LlkIutKa2GDYOTz6wsDxKIuQqmbT:ugqbisJfk0pkIuM8/z6wmx+ZU
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
a6741e55a5e91be6e8d2c8b70857829b11556c5865990055fb49d8978e643fc5.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 53KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ