Static task
static1
Behavioral task
behavioral1
Sample
8ecf0c688fe629bc00200a7cc923f8a615ded22929793fcdcd5347ce5cb1c8a8.exe
Resource
win7-20220414-en
General
-
Target
8ecf0c688fe629bc00200a7cc923f8a615ded22929793fcdcd5347ce5cb1c8a8
-
Size
3.1MB
-
MD5
39ac4a58adef107e1a9a659aa5742b41
-
SHA1
832ec6edcc3d78fef41f2fc763f15b33a1b5b54b
-
SHA256
8ecf0c688fe629bc00200a7cc923f8a615ded22929793fcdcd5347ce5cb1c8a8
-
SHA512
c823acc4202d88473de32c591d18a5d43375ff608e8e12d3a2abdd6ca040636d8fa5d55c5fe4f8f8a76fc3015ca23508380ce3b1b2e650a8591942df00f95dc7
-
SSDEEP
49152:0a3xM+9W9iM2RNx7lIkZceQYyGekbeadtG/FvGsdHCsqEUkTXvfKJfAXkF8Xb:PTZM2RuBYyGeUddtG/FoneXQfwkGb
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
8ecf0c688fe629bc00200a7cc923f8a615ded22929793fcdcd5347ce5cb1c8a8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 105KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ