Static task
static1
Behavioral task
behavioral1
Sample
c3cc0a27f51e73dd02f3edf4aa7ca9e51598917c4f667cb1c28784e9d71832df.exe
Resource
win7-20220414-en
General
-
Target
c3cc0a27f51e73dd02f3edf4aa7ca9e51598917c4f667cb1c28784e9d71832df
-
Size
2.0MB
-
MD5
7e2bae3ece76b669fdc4c63cc675dc41
-
SHA1
4d229e583a2e9887388992de8898a7be60e13fc5
-
SHA256
c3cc0a27f51e73dd02f3edf4aa7ca9e51598917c4f667cb1c28784e9d71832df
-
SHA512
36bc6b0af2270c4dd4c8fe3d06fe56edba504fa9e7ee6afde22d2b8ebd82b29f0734d1fe520b771383f1752108311b2ac39ef0fe30e99e017010debb9da5de26
-
SSDEEP
49152:hO7Tw5CkmnXvhya504PF3/ZOEN6B6Eex5IS2qmapryJNJ:hO7T7vhLldo7ex5I9JKyJNJ
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
c3cc0a27f51e73dd02f3edf4aa7ca9e51598917c4f667cb1c28784e9d71832df.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 86KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 11KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 23KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ