Static task
static1
Behavioral task
behavioral1
Sample
eb40b8853309d62c761b726d49c9530c9b9e6ea4f0e9000c16a717573a29b2a9.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
eb40b8853309d62c761b726d49c9530c9b9e6ea4f0e9000c16a717573a29b2a9.exe
Resource
win10v2004-20220414-en
General
-
Target
eb40b8853309d62c761b726d49c9530c9b9e6ea4f0e9000c16a717573a29b2a9
-
Size
3.0MB
-
MD5
7b8f95bab279ea8177ee5656450f0df6
-
SHA1
847f7d6d960c0059ff718df6cf46c6f32985cb36
-
SHA256
eb40b8853309d62c761b726d49c9530c9b9e6ea4f0e9000c16a717573a29b2a9
-
SHA512
d78b94c240150e7fbf77c9b3323b78a0d0c89453e65f62f9fc7e09e77baf365157d897af17fd0ac05e08023d9b0e7e17cbe39da3223aad54d8aa1232da67c75d
-
SSDEEP
49152:0KtPi3voile47nU+p3IdR8CDiCZB289TIplEGx8pDIZ2qqqG2M157PG:0TReGU+6jXDij8UKmEDIZ2qS57PG
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
eb40b8853309d62c761b726d49c9530c9b9e6ea4f0e9000c16a717573a29b2a9.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 127KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 27KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 92KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ