Static task
static1
Behavioral task
behavioral1
Sample
63e0a965c53778faf5756e0e942f0723fb38b7ec6baf9f9447667ba80b5a0a8d.exe
Resource
win7-20220414-en
General
-
Target
63e0a965c53778faf5756e0e942f0723fb38b7ec6baf9f9447667ba80b5a0a8d
-
Size
2.9MB
-
MD5
496334838840d313341bb904378c0484
-
SHA1
3bf21a6b3c70861101810c1b695e6be30f41497a
-
SHA256
63e0a965c53778faf5756e0e942f0723fb38b7ec6baf9f9447667ba80b5a0a8d
-
SHA512
0c443798bdfd9e718c8ad5c04c6d835649b0304c34b8d52cbe34a3c008de11771360dd76b38f89737aed8b855efd232e8a3496f4db74ebbc73a3e44ad22e236d
-
SSDEEP
49152:ajOwIq4n8SHUbm+hh1KJFZO38TMKy3EgIAM9bJ6E6tnsx1f:aqlq48Sk/h18FZO3F3E3As8E6cZ
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
63e0a965c53778faf5756e0e942f0723fb38b7ec6baf9f9447667ba80b5a0a8d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 832KB - Virtual size: 834KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE