Static task
static1
Behavioral task
behavioral1
Sample
1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe
Resource
win10v2004-20220414-en
General
-
Target
1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea
-
Size
8.2MB
-
MD5
5b82b1c965ec9f299610a19d69496fe5
-
SHA1
a0f189bd06817a4af77e8384144d5a4ed13ca632
-
SHA256
1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea
-
SHA512
a826f334b7b3ab842d2d83d4314a0074699a7c866dd5d1db091997ba73f5bdbcc45396bc180f229276794ea1636276950477bd043dec480460cd528308835740
-
SSDEEP
196608:NoRPURoifK95GTPlNDRAHu31rUfEYe6qh5QjBRygQxY:NeUR5K7sPl0alUfEYjjrygQxY
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
1d5a5300a090e82a5364ae76282d0529ee07f5e891bb5f6b03eaf22220ddbcea.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 118KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ